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Preface 


Most  current  military  and  all  civil  engines  are  operated  under  “Safe-life"  procedures  for  their  critical  components.  Experience 
has  shown  that  this  philosophy  presents  two  drawbacks; 

(a)  The  move  towards  designs  allowing  higher  operational  stresses,  and  the  use  of  advanced  high-strength  alloys  make  it  likely 
that  a  disc  burst  could  happen  (following  a  rapid  crack  growth)  well  before  the  statistically-based  “Safe-life”  has  been 
achieved. 

(b)  It  is  potentially  wasteful  of  expensive  components,  since  it  has  been  estimated  that  over  80%  of  engine  discs  have  ten  or 
more  low  cycle  fatigue  lives  remaining  when  discarded  under  “Safe-life”  rules. 

Damage  Tolerance  being  an  alternative  lifeing  philosophy,  the  Sub-Committee  on  “Damage  Tolerance  Concepts  for  the  Design 
of  Engine  Constituents"  has  therefore  decided  to  conduct  a  series  of  four  Workshops  addressing  the  areas  critical  to  Damage 
Tolerant  design  of  engine  parts. 

The  present  report  includes  the  papers  presented  during  Workshop  4  which  was  devoted  to  Reliability  and  Quality  Assurance. 

it  also  includes  the  content  of  the  discussions  which  followed  the  presentations.  On  behalf  of  the  Structures  and  Materials 
Panel,  1  would  like  to  thank  the  authors,  the  recorders  of  the  discussions  and  the  session  chairmen  whose  participation  has 
contributed  so  greatly  to  the  success  of  the  Workshop. 


Preface 


La  totalitc  des  moteurs  civils  et  la  plupart  des  moteurs  militaires  sont  actuellement  mis  en  oeuvre  suivant  les  concepts  de  “durre 
de  vie  certaine"  cn  ce  qui  concerne  leurs  parties  vitales.  La  pratique  de  cette  approche  a  mis  en  evidence  les  deux  inconvenients 
suivants: 

(a)  La  tendance  a  I'utilisation  des  moteurs  sous  contraintes  m^aniques  plus  elevees  et  I'emploi  d'alliages  a  haute  resistance 
rendent  possible  leclatement  d'un  disque  (a  la  suite  d'une  progression  rapide  de  fissure)  avant  que  la  “duree  de  vie 
certaine".  evaluee  statistiquement,  ait  ete  atteinte. 

(b)  On  observe  egalement  un  gaspillage  de  piwes  onereuses,  puisqu’on  estime  que  80%  environ  des  disques  retires  du  service 
conformement  aux  regies  de  “duree  de  vie  certaine”  ont  encore  un  potentiel  superieur  a  dix  durees  de  vie  en  fatigue 
oligocyclique. 

La  Tolerance  aux  Dommages  constituant  une  autre  approche  possible  de  la  definition  des  potentiels  de  vie,  le  Sous-Comite 
“Concepts  de  Tolerance  aux  Dommages  pour  le  dimensionnement  des  composants  de  moteurs”  a  decide  d'organiser  une  serie 
de  quatre  Ateliers  consacres  aus  divers  aspects  de  la  Tolerance  aux  Dommages  appliqu^  aux  moteurs. 

Le  pre-sent  rapport  contient  les  diverses  plantations  effectuees  a  I'occasion  du  dernier  d’entr’eux  traitant  de  la  Fiabilite  et  de 
l  Assurance  Qualite.  On  y  trouve  egalement  un  compte-rendu  des  discussions  qui  ont  suivi  les  diverses  plantations. 

Au  nom  de  la  Commission  Structures  et  Materiaux,  je  remercie  les  auteurs,  les  rapporteurs  de  discussion  et  les  prraidents  de 
sessions  qui  ont  grandement  contribue  au  succes  de  cet  Atelier. 


R.Labourdette 
Chairman,  Sub-Committee  on 
Damage  Tolerance  Concepts 
for  the  Design  of  Engine 
Constituents 
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INTRODUCTION  -  NEEDS  AND  APPROACHES  TO  RELIABILITY 
AND  QUALITY  ASSURANCE  IN  DESIGN  AND  MANUFACTURE 

DR.  A.C.  PICKARD 

Chief  of  Materials  and  Mechanical  Engineering 


Rolls-Royce  pic 
P.O.  Box  31 
Derby 
DE2  8BJ 
U.K. 


INTRODUCTION 


An  AGARD  meeting  on  the  Damage  Tolerance  Concept  (DTC)  was  held  in  San  Antonio  in 
1985.  One  of  the  conclusions  of  this  meeting  was  that  DTC  offers  a  way  to  improve 
the  integrity  and  efficient  utilisation  of  critical  aero  engine  components,  in 
particular  those  manufactured  from  the  high  strength  materials  which  are  required  to 
meet  the  design  objectives  set  for  high  performance  military  engines.  Following 
this  meeting,  a  series  of  workshops  were  arranged  to  investigate  various  aspects  of 
DTC. 

The  fourth  workshop  meeting  is  aimed  at  exploring  reliability  and  quality  assurance 
issues  in  the  Damage  Tolerance  approach.  To  this  end,  a  series  of  papers  are  to  be 
given,  following  this  introduction,  to  explore  the  implications  on  DTC  of: 

(a)  Component  material  specifications  and  standards. 

(b)  Controls  on  manufacturing  processes  and  procedures. 

(o)  Design  systems  and  quality  assurance. 

The  meeting  will  also  explore  the  possibility  of  a  common  AGARD  approach  and 
Database  on  quality  -  and  integrity-related  issues  which  arise  during  aero  engine 
component  life  assessment. 

The  Need  for  Quality  Assurance 

The  primary  goal  for  Quality  Assurance  is  to  provide  Customer  Satisfaction.  From 
the  customer's  viewpoint,  this  means  that  the  product  must  meet  the  specification. 
This  is  not  the  complete  story,  however;  there  must  also  be  good  communication 
between  the  customer  and  the  manufacturer.  The  aim  here  is  to  ensure  that  the 
customer  gives  a  clear,  unambiguous  specification  of  what  is  required  and  that  the 
manufacturer  understands  all  aspects  of  this. 

A  good  example  of  this  is  the  definition  of  the  mission  profiles,  mission  mixes  and 
life  requirements  which  the  aero  engine  is  designed  to  achieve.  A  simple 
requirement  that  "the  engine  fracture  critical  parts  must  achieve  an  inspection 
interval  of  x  hours"  is  an  insufficient  definition,  since  the  relationship  between 
cyclic  life  usage  and  time  in  service  depends  on  the  types  of  mission  flown. 

Equally,  if  the  customer  defines  mission 

profiles  and  mission  mixes  and  then  uses  the  engine  for  different  profiles  or  mixes, 
he  must  expect  to  see  a  consequent  change  in  the  lives  achieved  expressed  in  hours 
and/or  cycles.  In  the  case  of  cyclic  life-limited  components,  however,  the  life  in 
"equivalent  cycles"  should  not  change  in  these  circumstances. 

Formality  and  Audit 

Quality  can  be  considered  as  a  "state  of  mind"  which  should  pervade  all  levels  of  a 
design/manufacturing  organisation;  it  is  necessary  that  companies  have  the  correct 
infrastructure  to  encourage  a  "quality"  approach.  Two  important  aspects  of  this 
are : 

(a)  Formal  systems  must  be  Implemented  covering  all  aspects  of  the  product 
definition  and  manufacturing  processes. 

(b)  Regular  review  and  audit  must  be  performed  against  the  formal  system 
requirements,  both  internally  (self-audit)  and  externally  (customer  audits). 
There  must  also  be  an  acceptance  of  the  need  to  change  a  system  if  an  audit 
reveals  a  potential  quality  problem. 

Audit  is  the  means  by  which  the  customer  can  check  that  the  supplier  will  deliver 
products  of  the  required  level  of  quality.  This  approach  should  pervade  the 
design/manufacturing  organisation  -  every  Interface  within  the  Company  can  t)e 
thought  of  in  terms  of  "customer /supplier"  relationships. 


Definition  of  Accountability 


Definition  of  accountability  is  important,  both  within  the  design/manufacturing 
organisation  and  between  this  and  the  customer.  From  a  supplier  viewpoint,  it  is 
necessary  to  ensure  consistency  and  formality  of  approach  and  to  avoid  duplication/ 
overlap  or  gaps  in  the  overall  product  definition/manufacture  process.  Smooth 
operation  of  interfaces  is  a  key  requirement  for  efficiency  and  quality.  From  a 
customer  viewpoint,  it  is  necessary  to  know  the  limits  of  accountability  of  the 
supplier  and  activities  for  which  the  customer  is  responsible  -  for  example,  the 
definition  of  missions  and  mission  mixes.  It  is  also  important  that  the  customer 
should  have  identified  contact  points  within  the  Supplier  organisation  from  which 
advice  can  be  sought  and  rapid  resolution  of  problems  obtained. 

Quality  Assurance  in  Design 

Verification  is  a  key  issue  in  the  assurance  of  quality  in  Design.  The  methods  used 
in  the  design  process  must  be  correlated  against  observed  behaviour;  this  may  be 
accomplished  by  performing  measurements  using  instrumented  development  engines,  or 
by  appropriate  rig  testing.  The  validated  design  methods  must  then  be  embedded  in 
appropriate  procedures  to  ensure  their  correct  use  and  to  call  up  direct 
verification  tests  where  necessary. 

Examples  of  information  required  for  direct  design  verification  are: 

(a)  Performance  checks  and  measurements. 

(b)  Secondary  air  system  measurements  (flows,  pressure  ratios,  air  temperatures). 

(c)  Metal  temperature  measurements. 

(d)  Vibratory  stress  measurements. 

(e)  Development  engine  growth  measurements. 

(f)  Damage  tolerance  crack  growth  measurements  in  cyclic  engine  tests. 

Indirect  verification  is  usually  performed  for: 

(a)  Stress  analysis  methods,  using  instrumented  rig  tests. 

(b)  Component  over speed  capability,  using  rig  tests. 

(c)  Component  cyclic  life  capability,  using  rig  tests  combined  with  laboratory 
specimen  tests,  to  give  an  understanding  of  materials  behaviour. 

Figure  1  shows  a  summary  of  the  procedures,  methods,  verification  tests  and  service 
life  management  approach  required  for  critical  component  design,  life  estimation, 
validation  and  management. 

Past  experience  clearly  plays  a  large  part  in  ensuring  a  "quality"  design  is 
produced.  The  incorporation  of  this  experience  and  derived  Design  criteria  into 
appropriate  databanks  is  important;  easy  access  to  this  information  during  the 
design  process  ensures  that  good  past  design  practice  is  fed  into  new  designs. 

Component  and  Material  Specifications  and  Standards 

Accurate  specification  of  the  materials  used  in  gas  turbines  is  essential  in 
ensuring  a  "quality"  design.  Table  1  indicates  some  of  the  key  quality  standards 
which  need  to  be  specified  to  ensure  that  the  material  behaviour  will  match  the 
design  intent.  While  some  of  these  may  be  monitored  for  each  component  by 
specification  of  appropriate  material  release  properties,  others  are  dependent  on 
sampling  programmes  and  the  definition  of  appropriate  standardisation  and  approval 
materials  evaluation  packages. 

One  key  question  here  is  "is  the  specification  absolute,  or  is  it  relative  to  some 
process?".  A  good  ex^unple  is  the  definition  of  inspection  requirements,  which  may 
be  absolute  (e.g.  No  cracks  bigger  than  x  run  long  are  acceptable)  or  relative  to  the 
inspection  process  (e.g.  No  cracks  visible  when  viewed  with  x3  binoculars  under  some 
standard  conditions,  with  standard  eyesight  inspectors). 

Quality  Assurance  in  Production 

Control  of  the  manufacturing  process  is  essential  to  both  the  traditional  "safe 
life"  and  Damage  Tolerance  approaches  to  component  life  management.  Lack  of 
manufacturing  process  control  can  lead  to  unacceptable  levels  of  scatter  in 
component  behaviour  and  the  risk  that  the  parameters  used  to  establish  minimum 
component  life  (e.g.  results  of  individual  rig  tests)  may  not  be  representative  of 
the  complete  family  of  components  in  service. 
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Key  issues  here  are: 

(a)  Definition  of  manufacturing  methods. 

(b)  Fixed  practice  concepts. 

(c)  Relationship  of  process  control  to  design  intent. 

(d)  Statistical  process  control  as  a  means  of  monitoring  process  variability. 

( e )  Change  procedures . 

(f)  Non  conformance  and  accept/reject  criteria. 

(g)  Process  control  and  inspection  criteria. 

While  the  need  for  quantification  of  process  control  methods  is  recognised,  a  key 
question  is  "what  validation  evidence  is  required  to  demonstrate  the  achievement  of 
process  control?".  Development  of  process  modelling  methods  is  expected  to  assist 
in  the  identification  and  control  of  key  process  variables  in  support  of  a 
quantitative  approach  to  this  issue. 

The  Workshop 

The  aim  of  this  workshop  on  reliability  and  quality  assurance  is  to  investigate  some 
of  the  issues  raised  in  this  introduction,  and  to  review: 

(a)  The  need  for  a  common  AGARD  approach  to: 

-  material  and  process  specifications 
lifing  standards 

hazard  analysis 
in  service  life  monitoring 
information  exchange 

(b)  The  possibility  of  constructing  an  AGARD  database  on  integrity  related  issues: 

-  materials  behaviour  (defect  types,  etc) 
effects  of  damage 

-  environmental  effects 

-  mission  related  behaviour 


TABLE  1 

FACTORS  IN  EWGIHKERIHG  QUALITY  STANDARDS 


Surface  Requirements 

Sub- 

•Surface  Requirements 

o 

Permitted  Crack  Size  (mm) 

o 

Ultrasonic  Response  as  standard 

Artificial  Defect  (SAD) 

o 

Grain  Size  (mm) 

■-  equivalent  flat  bottom  hole  size 

o 

Macrostructural  features  (mm) 

o 

Inclusion  Size 

o 

Microstructural  features  (mm) 

o 

Residual  Stress 

o 

Inclusions  (mm) 

o 

Defect  distribution  (within 

component  and  on  going) 

o 

Porosity  (mm) 

o 

Microstucture 

o 

Machinery  abuse/Surface  strain 

o 

Scratches  (mm) 

o 

Dents/Bruising 
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LIFE  ESTIMATION,  VALIDATION  AND  MANAGEMENT 


FIG.  1 


METHODS  AND  LIFE 

MATERIAL  DATA  ESTIMATION 


DEVELOPMENT  SERVICE  LIFE  MANAGEMENT 

VALIDATION  TESTS  &  PRODUCE  ASSURANCE 
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LA  MAITRISE  DES  PROCEDES  DE  FABRICATION 
DANS  UNE  CONCEPTION  DE  TOLERANCE  AUX  DOMMAGES 

par 

Jean-Paul  Herteman 
SNHCMA,  Direction  de  la  Qualite 
B.P.81 

9 1 003  Evry  Cedex 
France 


Concevolr  un  prodult  "Tolerant  aux  Doffloiasea"  conslace  1  considdrer  gu'il  peut  contenir  des  donnages  ou 
ddfauta,  ddternlner  lea  caraccdrisciguea  de  eea  doonages  et  ddfauts  et  faire  en  aorte  gu'ila  n'dvoluent 
paa,  pendant  la  durde  d'utlllaatlon  conalddrde.  d'une  fagon  telle  gue  I'lntdgrltd  atructurale  du  prodult 
ne  aolt  plus  aaaurde.  Lea  ddfauta  Initlaux  gue  gdndre  le  processus  de  fabrication  font  bien  dvidennent 
partie  des  dosssages  i  prendre  en  conslddratlon. 

La  naltrtse  des  procddds  de  fabrication  est  la  constante  recherche  de  la  plus  baase  variabilitd  possible 
des  caractdristlgues  des  pldces  produites.  II  s'aglt  blen,  en  jouant  sur  tous  les  plans  possibles 
(Adthodes,  aoyens,  hoaaes,  etc...)  de  tendre  vers  1‘absence  de  "ddfauts",  guel  gue  soit  le  sens  gue  I'on 
pulsse  donner  au  tense.  A  preoldre  vue,  aals  A  prealdre  vue  seuleaent,  11  pourralt  seabler  paradoxal  de 
trailer  de  la  place  de  la  aattriae  dea  procddds  dans  la  conception  et  production  de  produita  Toldranta 
aux  Doanages  :  al,  pourraient  estiaer  certains,  les  ddfauts  sont  toldrables,  pourguoi  ne  pas  en  tirer 
parti  en  alldgeant  les  efforts  visant  A  les  supprlaer  et,  par  Id  adae,  obtenlr  une  rdduction  des  coQts 
de  production  * 

One  telle  stratdgie  est  a  priori  dangereuae,  car  le  postulat  sur  leguel  elle  se  fonde  n'est  en  pratigue 
gudre  vdrlfid  par  I'expdrience  induatrielle.  Augaenter  la  variabilitd  d'un  procddd  dlainue  rareaent  les 
coQts  de  production,  aals  coaporte  au  contralre  blen  des  geraes  de  surcoOts  conslddrables  ;  ndeesaltd 
d'introdulre  des  inspections  suppldaentalres,  accrotsseaent  des  analyses  pour  sanctlonner  les  non- 
-conforaitda,  augmentation  dea  retouches  et  rebuts,  le  tout  gdndrant  une  ddgradation  iaportante  des 
cycles  et  valours  d'exploitation. 

Nais  cette  stratdgie  de  "aoindre  aaltrise  des  procddds”  constltueralt  aussi  et  surtout  une  faute  sus¬ 
ceptible  de  aettre  en  pdril  la  gualltd  adae  du  prodult  congu  Toldrant  aux  Doamages.  La  aaltrise  des 
procddds  est  autant,  sinon  davantage,  ndceasaire  dans  une  conception  de  Toldrance  aux  Doamages  gue  dans 
une  conception  conventlonnelle  de  ’Vie  SOre”.  Ceci  pour  des  raisons  gui  tiennent  d'une  part  A  la 
fiabilltd  et  sQretd  d'exploitation  du  aoteur  et  d'autre  part  A  son  coOt  global  de  possession.  Nous  pas- 
aerons  en  revue  cea  raisons  dans  la  prealdre  partie  de  I'exposd. 

Par  ailleurs,  la  Toldrance  aux  Doamages  contient  en  elle  adae  un  certain  nombre  de  concepts  gui  peuvent 
dtre  utillsds  avec  profit  pour  modifier,  infldchir  et  amdliorer  les  aodalltds  d'accesslon  A  cette  ndces- 
aalre  aaltrise  des  procddds.  Nous  en  examinerons  guelgues  uns  dans  la  seconds  partie  de  I'exposd. 
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Piabilitd  et  sOretd  de  fonctlonnement  :  ddfauts  ponctuels. 


Considdrons  tout  d'abord  les  ddfauts  adtallurglgues  A  caractdre  ponctuel  ou  local,  tela  gue  fissures  de 
rectification,  de  soudure,  de  traiteaent  theralgue,  repll  ou  ddchlrure  de  forge,  aicro-retassures  ou 
soufflures  de  fonderie,  inclusions  ou  sdgrdgations  provensnt  de  1 'dlaboration,  etc...  Aprds  une  dven- 
tuelle  pdrlode  'd' Incubation”,  trds  variable  et  iapsrfaiteaent  prdvlsible  en  I'dtat  actual  des 
aoddlisatlons,  toutes  ces  diacontlnultds  locales  du  matdrlsu  sont  susceptlbles  de  se  developper  en 
utilisation,  en  sulvant  peu  ou  prou  les  lots  de  la  mdcanlgue  de  la  rupture.  Bt,  toutes  choaes  dgales  par 
ailleurs,  ces  lois  sont  telles  gue  la  durde  de  vie  rdsiduelle  d'une  pldee  est  extrdmeaent  sensible  A  la 
dimension  de  la  fissure  -  ou  guasl  fissure  -  inltiale  conslddrde.  Une  incertitude  de  guelgues  dlxldmes 
de  am  sur  cette  dimension  Initlale  peut  condulre  A  une  erreur  de  SO  t  A  100  t  sur  le  nombre  de  cycles  de 
propagation  avant  la  rupture  brutale.  L'lntdgrltd  atructurale  d'une  plAce  Toldrante  aux  Doamages  ddrlve 
done  de  la  prdelslon  et  de  la  fiabilltd  de  la  ddtermination  des  caractdristlgues  de  la  fissure  ou  ddfaut 
initial.  D'une  fagon  gdndrale,  cette  ddtermination  fait  appel  A  un  contrOle  non  destructif,  pratlgud 
systdmatlgueaent  pendant  le  cycle  de  fabrication,  puls  repdtd,  si  ndceasaire,  pdriodlguement  au  cours  de 
la  vie  de  la  plAce.  La  tallle  du  ddfaut  initial,  dent  on  doit  assurer  une  propagation  sub-critigue,  pen¬ 
dant  la  pdrlode  conslddrde  est  alors  cells  correspondent  aux  taux  de  probabilltd  de  ddtectlon  et  de  con- 
fiance  gui  sont  estimds  ndcessalres  et  suffisants  (par  example  99  %  -  9S  1). 
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Let  aAthodet  qui  peraettent  d'obtenir  ces  donndes  statistlques  sont  de  nise  en  oeuvre  lourde  et 
ddllcete,  et  lee  rdeultett,  en  temes  de  ddfaut  nlnlnuai  detectable,  parfols  eioisnds  des  souhalts  du 
concepteur.  L'eneeMble  a  largenent  dtd  dlaeutd  au  eours  de  la  premiere  session  de  I'atelier  AGAKO  -  SHP, 
consaerde  aui  mdthodes  d' inspection  non  destructive,  et  nous  n'y  reviendrons  pas  ici.  Force  est 
cependant  de  constater  que  la  fiabilitd  de  1' inspection,  si  elle  est  essentielle  dans  une  conception 
Toldrante  aui  Dommages,  n'est  pas  toujours  sufflsante  A  elle  seule.  XI  est  souvent  ndcessaire  de  lul  as- 
socier,  et  quelquerois,  de  lul  aubstltuer,  la  fiabilltd  de  fabrication,  c'est  A  dire  de  combiner  le 
risque  de  non-ddtection  du  ddfaut  et  le  taui  d'occurence  de  ce  dernier. 

Bien  des  ddfauts  mAtallurgiques  citAs  plus  haut  sont  dans  une  situation  oA  une  combinaison  de  ce  type 
est  ttAcessaire.  En  effet,  dans  le  meilleur  des  cas,  seules  sont  accesslbles  et  connues,  des  probabllitds 
de  detection  eiprimees  en  terae  d'etalons  de  reference  (dlamArre  du  reflecteur  A  trou  A  fond  plat  en 
contrftle  ultra  sons,  surface  d'une  entallle  uslnde  en  contrSle  par  courants  de  Foucault,  IQI  en  contrSle 
radiographlque,  etc...).  Or  il  n'eiiste  pas  toujours  de  correlation  simple  ou  systematlque  entre  ces 
grandeurs  de  reference  et  les  caracterlstlques  physiques  du  ddfaut  metallurglque,  qui  dAtermlnent  la  du- 
rde  de  vie  reslduelle  rdelle  de  la  plAce. 

Le  cas  des  disques  de  compresseur  ou  turbine  haute  presslon  eiabords  par  mAtallurgie  des  poudres 
constitue  un  bon  eiemple  de  cette  nAcessaire  complAnentaritA  entre  Inspection  et  maltrise  du  procAdA. 
Ces  produits  contiennent  en  effet  des  inclusions  de  natures  diverses  (cAramiques  provenant  du  four  de 
fusion,  de  la  busette  d'atomlsatlon,  etc...),  dont  la  distribution  est  llAe  A  la  dimension  du  tamls 
choisi  et  la  technologie  de  I'ensemble  du  procAdA.  L'objectlf,  pour  un  moteur  militaire  d'une  durAe  de 
vie  rAsiduelle  en  propagation  de  quelques  mllllers  de  cycles  correspond  A  des  dimensions  maximales 
d' inclusion  variant  entre  100  et  SOO  microns  environ,  selon  le  niveau  de  contralnte,  la  tcmpArature,  le 
type  et  les  tones  de  piAce,  et  la  nature  physique  de  1' inclusion.  Au  prix  de  developpements 
technolog iques  et  d' Investissements  importants,  et  d'un  coQt  d'inspection  consldArable,  11  est  possible, 
par  ultra-sons  (dans  le  volume)  et  courants  de  Foucault  (en  surface),  de  garantir  la  dAtection  de 
'dAfauts  parfaits”  (trou  A  fond  plat,  etc...)  dont  les  dimensions  correspondent  aux  100  A  SOO  microns 
recherchAs.  Hals,  eomme  le  montre  la  figure  1,  la  tallle  du  "dAfaut  parfait  Aquivalent"  (diamAtre  du 
trou  A  fond  plat),  telle  qu'estlmAe  d'aprAs  I'inspection  ultrasonore  par  example,  n'est  que  faiblement 
corrAlAe  avec  les  dimensions  exactes  de  1' Inclusion  correspondante  (mesurAe  par  dissection  de  i' in¬ 
dication  U-S).  Dans  une  situation  de  ce  genre,  I'assurance  que  la  durAe  de  vie  rAsiduelle  (DR)  est  blen 
eelle  prAvue  repose  sur  une  double  assertion  du  type  : 

1*)  ProbabilitA  >y.  99  t,  confiance  ^  9S  1  de  dAtecter  une  fissure  Inltlale  dont  la  vie  en 
propagation  est  OB. 

2')  ProbabilitA  10  qu'une  plAce  possAde  une  inclusion  dont  la  vie  en  propagation  est  DR. 


Blen  entendu  en  supposant  mAme  que  I'assertlon  1  pulsse  Atre  sufflsante  A  elle  seule,  un  procAdA  peu 
maltrisA  ,  qui  s'Alolgnerait  beaucoup  de  I'assertion  2,  n'auralt  aucune  vlabllltA  Aconomique,  car  11 
gAnArerait  des  rebuts  exhorbltants  lors  des  inspections.  Pour  plloter  1 'accession  A  la  mattrise  du 
procAdA  de  mAtallurgie  des  poudres,  I'on  dispose  d'un  certain  nombre  d' indlcateurs  qui  permettent  de  me- 
surer  la  distribution  -  ou  plutSt  une  psrtie  de  celle-ci  -  des  inclusions  tout  au  cours  de  1 ' Alaboration 
:  Alutrlation  et  dissolution  acide  des  poudres,  micrographie  des  billettes,  refusion  de  "boutons"  par 
bombardements  d'Alectrons.  La  figure  2  montre  comment  des  actions  volontaires  (modifications 
d'Aquipement,  etc...)  mala  aussl  des  AvAnements  "eitArleurs"  (conme  une  interruption  puls  reprise  de  la 
production)  se  rApercutent  effectivement  sur  de  tela  indlcateurs.  Et  la  figure  3  conflrme  qu'll  existe 
bien  jne  certalne  corrAlation  entre  ces  mesures  revAlatrices  en  amont  de  la  mattrise  du  procAdA,  et  le 
taux  de  dAfalllance  lors  de  I'inspection  finale. 

Les  inclusions  InhArentes  au  procAdA  de  mAtallurgie  des  poudres  ne  doivent  pas  Atre  consldArAes  comme  un 
cas  IsolA  ou  trAs  particuller.  Les  sAgrAgatlons  alphagAnes  dures,  A  base  d' interstitiels  (0,N,C)  dans 
les  alllages  de  tltane,  les  sAgrAgatlons  de  carbonltrures  complexes  (white-spots)  dans  les  alllages  de 
Michel  AlaborAs  VIN/VAR  soulAvent  des  questions  voisines  et  appellent  des  solutions  analogues.  Sim- 
plement  les  conditions  de  solllcitation  des  piAces  (tcmpArature,  contralntes)  sont  en  gAnAral  molns 
sAvAres,  les  dAfauts  "tolArables"  plus  importants.  Ils  ne  sont  pas  pour  autant  toujours  facilement 
Inspectables  et  mattrlsables  aux  niveaux  nAcessalres. 


FlabllltA  et  sBretA  de  fonctlonnement  :  dAfauts  non  ponctuels. 


Si  les  dAfauts  ponctuels,  proches  d'une  fissure,  sont  les  premiers  qui  viennent  A  I'esprit  lorsque  I'on 
traite  de  la  TolArance  aux  Oommages,  ils  ne  sont  pas  les  seula  A  devoir  mArlter  I'attentlon.  D'autres 
dAfeuts,  plus  globaux,  tels  que  les  Acarts  dimenslonnels  ou  des  variations  de  microstructure  mAtal- 
lurglque  peuvent  rulner  la  flabllltA  d'une  conception  TolArante  aux  Dinmages  si  celle-cl  ne  les 
Incorpore  pas. 
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Des  non-conrormit^s  dimens ionnelles  peusent  gdndrer  des  perturbations  adrodynamiques,  modifier  les  con¬ 
ditions  aus  limites,  les  frequences  propres  et  les  amortissements,  amoindrir  les  marges  sis  i  vis  des 
flottements  adrodlastiques  avec  comme  consdquence  possible.  I'apparition  d'une  composante  vibratoire  se 
superposant  i  la  sollicitation  oligocyclique.  Or  1* Influence  des  sollicitations  vibratoires  sur  la 
propagation  des  fissures  est  particulldrement  forte,  line  composante  vibratoire  atteignant  simplement  IS 
X  de  la  sollicitation  oligocyclique  sera  le  plus  souvent  sans  grand  effet  sur  la  durde  de  vie  i 
I'amorqage.  Hais  11  suffira  qu'elle  solt  rencontrde  quelques  dizaines  de  secondes  seulement  par  vol,  d 
une  frequence  de  I'ordre  de  la  centaine  d'Hertz,  pour  que  les  durdes  de  vie  en  propagation,  exprimdes  en 
nombres  ou  en  heures  de  vol,  soient  divlsdes  par  un  facteur  dgal  ou  supdrieur  i  S.  Aucun  coefficient  de 
sdcuritd  sur  les  intervalles  d' inspection  ne  saurait  couvrir  une  telle  variabilitd  ;  c'est  bien  A  la 
mattrise  des  procddds  de  fournlr  I'assurance  que  si  ce  type  de  phdnomdne  n'a  pas  dtd  rencontrd  pendant 
la  ddveloppement  et  la  certification  du  moteur,  11  ne  se  rencontrera  pas  non  plus  sur  les  moteurs  de 
production. 

Le  cas  des  variations  de  microstructure  mdtallurgique  est  Idgdroment  diffdrent.  Li  aussl,  les  liens 
entre  la  microstructure  (tallle  et  morpbologie  des  grains,  des  phases  durcissantes,  etc...)  et  les 
vitesses  de  flssuration  sont  forts,  mdme  s'ils  sont  souvent  complexes  et  ddpendent,  entre  autres,  de  la 
tallle  de  fissure  et  des  conditions  de  sollicitation  considdrdes.  Hais  une  difflcultd  suppldmentaire  ap- 
paralt  :  dans  la  plupart  des  cas  er  effet,  les  variations  de  microstructure  ont  aussi  une  influence  im- 
portante  sur  les  durdes  de  vie  i  I'amorqage,  et  cette  influence  est  gdndralement  de  slxne  opposd  i  celle 
portant  sur  les  durdes  de  propagation.  La  dispersion  des  microstructures  est  alors  doublement  ndfaste  il 
ne  saurait  dtre  question  en  effet  d'assurer  la  sQretd  d’exploitatlon  de  la  pidce  au  ddtriment  de  sa  vie 
dconomique.  La  premidre  est  fondde  sur  des  calculs  de  propagation,  qui  seront  vdrlflds  si  la  tallle  de 
grain  est  "suffisanmenC  grande.  Hals  un  grain  "trop”  gros  ddgradera  la  seconde.  L' introduction  du  con¬ 
cept  de  Toldrance  aux  Donwiages,  dans  cct  example,  se  traduit  done  par  une  ndcessitd  accrue  de  maitriser 
les  variations  de  tallle  de  grain. 

Nous  avons  jusqu'i  prdsent  traltd  de  "ddfauts"  au  sens  le  plus  habltuel  du  terme,  c'est  i  dire  de 
violations  des  spdclf icatlons  constituent  la  ddfinition  du  produit.  Et  11  est  apparu  clalrement  que 
I'intdgritd  scructurale  des  pidees  conques  Toldrantes  aux  Dommages  ne  peut  dtre  assurde  par  la  seule 
inspection  des  "ddfauts".  La  maltrise  des  procddds  est  bien  i  cet  dgard  un  compldment  indispensable  des 
inspections  et  la  seule  vole  permettant  d'aboutlr  i  une  garantle  sufflsante  que  les  pidees  ne  com- 
porteront  effectlvement  pas  de  "ddfauts  non  toldrables” .  Hais  la  mattrise  des  procddds  ne  se  borne  pas  i 
offrlr  cette  assurance  de  capabllitd  de  vis  i  vis  des  spdeif Ications  ;  elle  vise  aussl  i  rddulre  la 
variabilitd  des  prodults  i  I'lntdrleur  de  la  plage  de  toldrance.  Bt  ceci  est  dgalcment  d'une  grande 
ucllltd  pour  des  pidees  Toldrantes  aux  Dommages,  pour  des  raisons  qul  constituent  en  quelgue  sorte  une 
gdndrallsation  de  I'exemple  des  microstructures  traitd  cl-dessus. 
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La  mattrise  du  coOt  global  de  possession 


La  dispersion  des  caractdristlques  (de  toutes  natures  ;  mdtallurgiques,  dimensionnelles,  de  surface, 
etc...)  des  pidees  est,  avec  celle  des  conditions  d'utlllsation  du  moteur,  directement  i  I'orlglne  de  la 
dispersion  des  durdes  de  vie  i  I'amorqage  et  en  propagation  qui  seralt  observde  si  les  moteurs  dtaient 
exploitds  de  faqon  "absolue".  Dans  une  conception  conventionnelle  de  "Vie  SOre",  beaucoup  de  pidees 
tournantes  critiques  (disques,  arbres)  ont  une  Durde  de  Vie  Autorisde,  obtenue  par  application  d'un  fac- 
teur  de  sdcuritd  i  la  Durde  de  Vie  Prdvue  (par  calcul  et  essais)  de  la  pidce  de  caractdristlques 
mlnimales.  Les  liens  entre  mattrise  des  procddds  et  coOt  global  de  possession  existent  done,  mals  de  fa- 
(on  partlelle  et  parfois  saturde  dans  la  mesure  od  11  est  difficile  de  traduire,  au  cours  de  la  vie  d'un 
programme,  une  rdduction  de  variabilitd  des  caratdristiques  produites  en  terme  d'accrolsscment  des 
Durdes  de  Vie  Prdvues  ou  de  diminution  de  facteur  de  sdcuritd.  A  1' Inverse,  une  pidce  Insuff Isamnent 
mattrisde,  dont  la  durde  de  vie  rdelle  seralt  Infdrieure  i  la  Durde  de  Vie  Prdvue,  pourra  ne  poser 
aucune  difflcultd  tant  que  le  facteur,  de  sdcuritd  masquers  son  insuff isance,  puls  entralner  une 
situation  catastrophlque  si  la  Durde  de  Vie  Autorisde  venalt  elle -mdme  i  plus  dtre  assurde. 

Dans  une  approrhe  de  Toldrance  aux  Dommages,  les  liens  entre  mattrise  des  procdd^.<  et  coQt  global  de 
possession  deviennent  i  la  fois  plus  directs  et  plus  continus.  Bxploitde  dans  son  Intdgralltd 
(Retirement  for  Cause),  cette  conception  peut  slier  Jusqu'i  autoriser  le  malntien  en  service  sans  autre 
llmlte  que  leur  durde  de  vie  (i  la  ddtectlon  do  Dommage  maximum  Toldrable)  rdelle.  Dans  une  telle 
situation,  toute  dispersion  de  caractdristlques  se  rdpercutera  directement  sur  les  durdes  d'utllisatlon 
effectives  des  pidees  ;  une  dispersion  excessive,  occaslonnant  un  nombre  Imprdvu  et  dlevd  de  ddposes 
"prdmaturdes"  conduiralt  i  des  consdquences  extrdmement  lourdes  sur  le  plan  loglstique.  XI  faudrait  ou 
bien  accepter  le  risque  d' indisponibilltds  opdrationnelles,  ou  bien  se  couvrir  par  la  constitution  de 
volants  de  pidees  de  rechanges  conslddrables  ;  le  bdndflce  que  I'on  peut  attendee  du  concept  Toldrance 
aux  Dommages/Retirement  for  Cause  se  trouveralt  annuld,  voire  transfer^  en  surcoOt  global  de  possesion. 
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L«  conception  Tolerance  aui  Domas^s  requiert  done,  cette  fols  aur  un  plan  purenent  dcononlque,  que  I'on 
cherche  i  dialnuer  autanc  que  poaslble  lea  "petlta  ddfauta  (toldrablea  initlaleawnt)  auaceptiblea  de 
devenlr  granda*.  lea  aeulla  de  non  propagation  Intrlnadquea  itant  plut&t  baa,  cecl  ae  tradult  par  une 
chaaae  conatante  aui  rayurea  et  bleaaurea  de  nanutentlon,  dcarta  de  fome  aur  un  eongd  de  raccordeawnt , 
bourreleta  en  llailte  de  aone  grenalllde,  etc...  On  troutera,  al  beaoln,  aux  flgurea  4  et  S,  dea  exenplea 
de  flaaurea  de  fatigue  amorqdea,  en  eaaala  partlela,  aur  dea  "ddfauta"  de  ce  genre.  I,eur  dllailnatlon  to- 
tale  eat  certea  malalade.  Hala  dea  progrda  algnlflcatlfa  peuaent  Stre  riallada  dda  lora  que  leur 
ndcdaaltd  eat  blen  conprlae.  La  figure  6  montre  coaoent  I'on  peut  avancer  dana  la  aaltrlae  dea  formea 
dea  congds  de  raccordement  dea  festonnagea  et  alvdolea  de  dlaquea  de  turbine  baaae  preaalon.  One 
premldre  amdlioratlon  Importante  a  dtd  obtenue  par  la  alae  en  place  d'un  contrble  Intdgrd  pemettant  au 
compagnon  de  contrSler  lul-nSme  la  qualltd  du  rayonnage,  et  done  de  rdaglr  "en  teapa  quaal-rdel*.  Une 
aeconde  dtape  d'andlloratlon  paralt  ae  deaalner  arec  I'antomatlaatlon  de  I'opdratlon  de  rayonnage,  qul 
apporte  un  mellleur  potential  de  rdpdtabllltd  (fig.  7).  On  autre  exemple  eat  fournl  fig. 8,  od  la  alae  en 
place  de  condltlonneaenta  adaptda  aux  dlaquea  de  turbine  a  perala  d'aadllorer  aenalbleaent  leur  dtat  de 
aurface  et  le  soabre  de  retouchea  ndceaaalrea  aulte  d  dea  ehoca  et  bleaaurea  de  awnutentlon. 


APPORTS  DE  U  TOLKRAMCg  AUX  DOMUGES  A  LA  HAITHfSE  DBS  FROCgPgS 

La  aaltrlae  dea  proeddda  eat,  noua  I'arona  ru  hauteaent  ndceaaalre  dana  une  approche  de  Toldrance 
aux  Doaaages.  Blen  entendu  lea  outlla  habltuela  d'acceaalon  A  cette  aaltrlae  a'appllquent  par- 
falteaent  ; 

-  Surveillance  atatlatlque  dea  produlta,  proceaaua  et  aoyena. 

-  Maintenance  prdventive,  analyae  de  flabllltd  dea  aoyena. 

-  Croupes  d'actlon  Qualltd. 

-  Hoddltsation  des  proeddda. 

-  etc. . . 


Hala  le  concept  de  Toldrance  aux  Doaaages  peraet  sans  doute  d'aborder  sous  un  angle  nouveau  et 
proaetteur  le  claaslque  probldae  de  la  "ndgoclatlon"  entre  exigences  de  conception  (spdclflcatlon) 
et  capaeltds  des  proeddds. 

Void  A  tltre  d'exeaple,  la  ddaarche  qul  a  dtd  sulvle  pour  une  aube  de  turbine  HP  aonocrlatalllne 
(alliage  AMI),  caractdrlade  par  la  finesse  de  sea  parola,  la  aopMstlcation  de  son  refroldlssesMnt 
Interne  et  une  teapdrature  dlevde  de  fonctlonneaent  (TKT  =  1850"K).  A  1' Issue  de  la  fabrication  dea 
20  prealera  jeux  et  de  la  preaidre  centalne  d'heurea  d'easala  de  developpeaent,  un  groupe  de 
travail  aultlfonctionnel  (Bureau  d'Etudea  -  Hdthodea  et  Atelier  de  fabrications  -  (}ualltd)  a 
rdalisd  ce  que  I'on  peut  appeler  une  "revue  du  prodult",  selon  la  adthodologle  aulvante  : 


.  49  spdclflcatlons  analysdes,  de  toutes  natures  :  adtallurglques,  dlaenslonnellea,  etc... 

3  erltdres  :  -  Crltlcltd  Ponctlonnelle 

-  Capabllltd  du  proeddd  de  fabrication 

-  Flabllltd  dea  contrdles  de  fabrication. 

4  ou  S  nlveaux  de  cotatlon  ; 

-  Pour  la  crltlcltd  fonctlonnelle  ; 

S-  Bffet  aur  la  navlgabllltd, 

4-  gffet  aur  le  coQt  de  poaaeaalon,  lea  perforaances. 

3-  Autres  effeta. 

2-  Marge  >  SO  t 
1-  Marge  ^  100  I 

-  Pour  la  capabllltd  du  proeddd  de  fabrication  et  la  flabllltd  dea  Inspections  : 

5-  Proeddd  non  capable  -  Inspection  non  flable.  Innovations  ndeeaaalres 

4-  Marges  de  capabllltd,  probabllltd  da  ddtectlon  A  aadllorer 

3-  Varlabllltd  A  aaidliorer  pour  des  ralaona  de  eoOt 
1-  Proeddd  sous  eontrftle 

Ces  eotatlona  aont  effeetndea,  entre  autres,  A  pertir  dea  entelgneaents  du  sulvl  atatlatlque  du 
proeddd,  taux  de  rebuts,  retouchea,  hlstograaaea  et  cartes  de  eoatrOle,  etc... 
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DtM  un  preaier  teaps,  chacune  dea  49  earaetdriatigues  eat  reportde  daaa  un  diagraane  Capabilltd  du 
procddd/Fiabllitd  d' inapectlon.  Ce  dlagraaae  peraet  de  ddteeter  lea  polnta  aur  leaquela  une  action 
laaddiate  a'iapoae.  Bnauite,  cea  49  caractdriatlquea  aont  plaedea  (fig. 9)  dana  un  dlagraaae 
Crltieltd  fonctionnelle/Capabilltd  du  procddd  t  Flabilitd  du  ContrSle,  (d'autrea  coablnalaona  de 
cea  2  eritdrea  aont  poaaiblea).  A  I'iaaue  de  cette  analyae,  le  groupe  de  traeail  a  dale  5S 

propoaitiona  dont  : 

.  13  rdflaiona  de  apdcifieationa 

.  26  aodiflcatlona  (dont  7  aajeurea.  c'eat  A  dire  entralnant  dea  Inaeatiaaeaenta  ) 
dea  procddda  de  fabrication  et  de  contrtle. 

.  16  prograamea  d'eaaaia  partlela  ou  aur  aoteur  deatlnda  A  vdrifier,  loraque  ndceaaaire,  la 

caractdre  "Toldrable*  de  certalnea  aarlatlona. 

Ce  type  de  ddaarche  conalete  blen  A  aaaurer  la  Toldrance  aux  Ddfauta,  et  par  son  caractdre 

unlaersel  fdddre  et  coordonne  lea  efforts  de  chacun  dans  le  but  conaun  et  ultiae  de  la  satisfaction 
du  client.  Cette  ddaarche  peut  naturelleoent  Atre  appllqude  auasl  aaec  grand  profit  dds  lea 
prealers  stades  de  la  conception  (deaslna  initlaux).  quitte  A  Atre  rdajustde  au  coura  du 
ddf eloppeaent ,  au  fur  et  A  oesure  que  I'expdrlence  en  production  et  en  eaaai  apporte  dea 
prdcisiona  aur  lea  ddfauta  apdclfiquea  de  la  pldce  considdrde  et  leur  coaporteaent  partlculler  aur 
le  aoteur  en  question. 

Dana  un  esprit  volain,  lea  concepts  de  Toldrance  aux  Doaoagea  peuvent  dgaleoent  fournir  de 
nouvelles  opportunitda  pour  falre  largeoent  diffuser  au  seln  de  I'entreprlse  lea  liens  qui  existent 
entre  la  qualitd  du  travail  de  chacun,  et  le  coaporteaent  du  produit  en  utilisation.  Nous  avons, 
par  exeople,  ala  en  place  un  stage  de  foroatlon  aur  le  thdae  "fatigue  et  ladcanlque  de  la  rupture* 
deatind  A  un  public  aussi  large  que  possible  de  technlciena  et  ingdnleura,  provenant  d'horiaons  lea 
plus  divers,  dqulpea  de  aarque  ou  de  prograooe,  laboratoires,  services  adthodes,  encadreaent 

d'atellera,  services  techniques  d'aprda-vente,  etc.. 

D'une  durde  de  4  jours,  ce  stage  coaporte  un  enseigneoent  thdorlque  extrAaement  rudioentaire  aur 
lea  aolllcltations  dana  lea  turbo-aachlnes,  lea  loia  de  la  fatigue  et  de  la  odcanique  de  la  rup¬ 
ture,  oais  auasl  un  aperqu  atatiatique  aur  lea  origlnea  dea  ddfalllances  atructurales  dea  aoteura 
en  service.  II  coaqtorte  aurtout  pluaieura  "dtudea  de  caa",  conguea  A  partir  d'expertlaea  rdelleoent 
effectudea  A  I'occaalon  de  ruptures  aurvenues  en  exploitation,  bien  entendu  aiaplifidea  ou  coa- 
pldtdea  pour  lea  beaolna  de  la  cauae.  Pendant  cea  dtudea  de  caa,  lea  particlpanta,  en  groupe,  aont 
aaenda  A  ; 

-  Identifier  et  cooprendre  lea  cauaea  inltlalea  de  la  ddfalllance  atructurale. 

-  Vdrifier,  par  dea  calcula  trda  aoonMlres,  lea  effeta  du  ddfaut  aur  lea  durdea  de  vie  A  I'aaorqage 
et  en  propagation. 

-  Confronter  cea  calcula  avec  lea  donndes  issues  dea  examens  fractographlques  (strles,  Hgnes 
d'arrdt,  etc. . . ) . 

-  Proposer  dea  procddurea  de  oalntlen  en  exploitation,  sous  concept  de  Toldrance  aux  Dooaagea,  de 
aMtdriels  qui  prdsenteraient  lea  oAaws  causes  potentiellea  de  ddfalllance  ;  choix  dea  techniques 
de  contrAle,  dea  intervenes  d' inspection,  etc... 

-  d'Bvaluer  lea  conadquences  logiatiques  de  telles  procddurea  auprda  du  client. 

Lea  personnea  ainai  foradea  ne  deviennent  pas  pour  autant  dea  experts  en  Toldrance  aux  Dooaagea. 
Haia  ellea  acquidrent  une  bien  aellleure  vlslbilitd  aur  cet  aspect  dea  phdnoadnes  et  ndcanlaaes  qui 
ae  produiaent  en  aoont,  en  aval  et  au  aeln  de  leur  travail  de  cheque  Jour.  L'iopact  qu'ellea  ont 
aur  la  satisfaction  du  client  final  leur  apparatt  plus  dale  et  plus  proche.  Davantage  aotlvdes, 
ellea  peuvent  s'iapllquer  de  faqon  plus  approfondle  et  plus  cohdrente  A  I'lntdrieur  du  processus 
industriel  global  de  conception/production/exploitation. 


La  Toldrance  aux  Dooaagea  appllqude  aux  aoteura  d'aviona,  se  prdaente  ainai  A  la  foia  cooae  une 
"ardente  obligation’  auppldaentalre  de  progreaaer  dana  la  aaitrlae  dea  procddda  et  coaae  I'op- 
portunitd  d'introdulre  dea  voles  nouvelles  pour  acedder  A  cette  aaitrlae. 
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The  design  of  a  "Damage  Tolerant"  product  consists  In  assuming  that  It  may  contain  damages  or  defects,  in 
determining  the  characteristics  of  such  damages  and  defects  and  In  taking  appropriate  steps  so  that  during 
the  considered  service  time  they  can  not  develop  In  such  a  manner  that  the  structural  integrity  of  the 
product  Is  no  longer  ensured.  Original  defects  generated  by  the  manufacturing  process  are  undoubtedly  part 
of  the  damages  to  be  taken  Into  consideration. 

Manufacturing  process  control  means  a  permanent  search  for  the  lowest  possible  variability  of  the 
manufactured  part  characteristics.  In  fact  It  tends  to  a  zero  "defect"  solution,  whatever  the  meaning 
given  to  the  word  "defect",  by  acting  In  every  field  involved  (methods,  means,  workforce,  etc.).  At  first 
glance,  but  only  at  first  glance.  It  might  seem  contradictory  to  deal  with  the  role  played  by  process 
control  In  Damage  Tolerant  product  design  and  manufacture  :  it  could  be  assumed  that  since  defects  are 
tolerable.  It  should  be  possible  to  take  advantage  of  It  by  reducing  the  efforts  made  to  eliminate  them 
and,  In  doing  so,  to  cut  manufacturing  costs. 

Such  a  strategy  Is  a  priori  dangerous  since  the  principle  which  It  Is  based  on  Is  scarcely  verified  in  the 
Industrial  reality.  The  Increase  of  the  variability  of  a  process  rarely  reduces  the  manufacturing  costs 
and  It  even  contains  many  germs  of  Important  additional  costs  :  need  for  the  Introduction  of  additional 
Inspections,  increase  of  investigations  to  Identify  non-conformltles,  Increase  of  reworks  and  rejections, 
all  these  actions  leading  to  a  considerable  worsening  of  cycles.  Inventories  and  work  In  process. 

In  addition  such  a  strategy  of  "lower  process  control"  would  above  all  be  a  mistake  likely  to  endanger  the 
very  quality  of  the  product  designed  as  "Damage  Tolerant  product".  Process  control  Is  as  necessary  for 
Damage  Tolerance  design  as  for  a  conventional  "safe  life"  design,  or  even  more,  for  reasons  relating  to 
the  engine  reliability  and  operation  safety  on  the  one  hand  and  to  the  life  cycle  costs  on  the  other  hand. 
We  will  review  these  reasons  In  the  first  part  of  this  paper. 

Furthermore  Damage  Tolerance  contains  several  concepts  which  can  be  used  profitably  to  modify,  reorientate 
and  Improve  the  procedures  giving  access  to  the  required  process  control.  Some  of  these  concepts  will  be 
discussed  in  the  second  part  of  this  paper. 


Necessity  of  process  control  : 

Reliability  and  operation  safety  ;  punctual  defects 

Let  us  first  consider  metallurgical  defects  with  a  punctual  or  local  character,  such  as  grinding,  welding 
or  heat  treatment  cracks,  forging  folds  or  tears,  microshrinkage  or  casting  blowholes,  inclusions  or 
segregations  resulting  from  processing,  etc.  After  a  possible  "Incubation"  time  which  varies  considerably 
and  which  Is  Imperfectly  predictable  In  view  of  current  modelizatlons,  all  these  local  material 
discontinuities  are  likely  to  develop  during  use  while  more  or  less  following  the  laws  governing  the 
rupture  mechanics.  All  things  being  equal,  these  laws  are  such  that  the  residual  life  of  a  part  Is  highly 
dependent  on  the  size  of  the  considered  Initial  crack  or  near  crack.  An  uncertainty  of  a  few  tenths  of  a 
millimeter  over  the  Initial  size  can  lead  to  a  50  }  to  100  t  error  In  the  propagation  cycle  number  before 
sudden  rupture.  So  the  structural  Integrity  of  a  Damage  Tolerant  part  is  derived  from  the  precision  and 
reliability  of  the  determined  Initial  crack  or  defect  characteristics.  In  general  this  determination 
requires  non-destructive  testing  carried  out  systematically  during  the  manufacturing  cycle,  then 
periodically  repeated,  if  required,  during  part  life.  The  size  of  the  initial  defect  for  which  a 
sub-crltlcal  propagation  has  to  be  ensured  during  the  considered  period  then  corresponds  to  the  detection 
probability  and  confidence  levels  considered  to  be  necessary  and  sufficient  (for  example  99  f  -  95  t). 
The  Implementation  of  the  methods  allowing  to  obtain  these  statistical  data  Is  heavy  and  delicate  and  the 
results.  In  terms  of  minimum  detectable  defect,  sometimes  deviate  ft*om  the  designer's  wishes.  This  subject 
was  widely  discussed  during  the  first  session  of  the  A(URD-SMP  working  group  dedicated  to  non-destructive 
testing  methods,  and  it  will  not  be  discussed  here  again.  However  it  must  be  noted  that  Inspection 
reliability  alone,  although  essential  to  Damage  Tolerance  design,  is  not  always  sufficient.  Often  inspec¬ 
tion  reliability  has  to  be  combined  with  and  sometimes  replaced  by  manufacturing  reliability,  l.e  the  risk 
of  a  non-detected  defect  has  to  be  combined  with  the  defect  occurrence  rate. 

Many  of  the  metallurgical  defects  mentioned  above  emerge  in  a  context  where  such  a  combination  Is 
required.  In  fact  In  the  best  case  only  detection  probability  levels  expressed  in  terms  of  master  gauges 
(defect  standard  flat  bottom  hole  diameter  In  ultrasonic  Inspection,  machined  notch  surface  In  ^y 
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current  Inspection,  IQI  in  radiographic  Inspection,  etc.)  are  accessible  and  known,  whereas  a  simple  or 
systematic  correlation  does  not  always  exist  between  these  standard  values  and  the  physical 
characteristics  of  the  metallurgical  defect  which  determine  the  real  residual  life  of  the  part. 

The  case  of  high  pressure  compressor  and  turbine  discs  processed  by  powder  metallurgy  provides  a  good 
example  of  the  necessary  complementarity  between  inspection  and  process  control.  In  fact  these  parts 
contain  different  types  of  inclusions  (ceramics  coming  from  melting  furnace,  from  atomization  nozzle, 
etc.),  whose  distribution  depends  on  the  size  of  the  sieve  and  the  technology  of  the  whole  P/M  process. 
For  a  military  engine,  the  objective  of  a  residual  propagation  life  of  some  thousands  of  cycles  corres¬ 
ponds  to  maximum  Inclusion  sizes  ranging  from  100  to  500  microns  approximately,  as  a  function  of  stress 
level,  temperature,  part  type  and  part  area,  and  the  inclusion  physical  characteristics.  At  the  expense  of 
considerable  investments  and  technological  developments,  not  to  mention  Important  inspection  costs,  it  is 
possible,  when  carrying  out  ultrasonic  (in  volume)  and  eddy  current  (on  surface)  inspection,  to  ensure  the 
detection  of  "perfect  defects"  (flat  bottom  hole,  etc.),  whose  dimensions  are  consistent  with  the  100  to 
500-fflicron  size  searched  for. 

However,  as  Fig.  1  shows,  the  size  of  the  "equivalent  perfect  defect"  (flat  bottom  hole  diameter),  as 
evaluated  by  ultrasonic  testing  for  Instance,  la  only  slightly  correlated  with  the  exact  dimensions  of  the 
correponding  inclusion  (measured  by  ultrasonic  indication  sectioning).  Under  such  circumstances  ensuring 
that  residual  life  (RL)  actually  corresponds  to  predicted  life  is  based  on  a  double  assertion  as  follows  : 

1°)  Probability  £*99  %,  confidence  2  95  >  of  detecting  an  initial  crack  whose  propagation  life  is  equal  to 
RL. 


2°)  Probability  i  10“'*  that  a  part  contains  an  inclusion  whose  propagation  life  is  equal  to  RL. 

Of  course,  even  when  supposing  that  assertion  1  may  be  sufficient,  a  poorly  controlled  process  largely 
deviating  from  assertion  2  would  have  no  economic  viability  and  would  generate  huge  rejections  during 
inspections.  To  control  the  access  to  P/M  process  control  there  are  some  indicators  for  measuring 
inclusion  distribution  (Or  to  be  more  precise  a  part  of  it)  during  the  whole  process  :  elutriatlon  and 
acid  dissolution  of  powders,  billet  micrography,  button  electron  beam  remeltlng.  Fig.  2  shows  how 
intentional  actions  (changes  in  equipment,  etc.)  as  well  as  "external"  events  (such  as  production  break 
and  resumption)  indeed  affect  such  indicators.  Fig.  3  confirms  the  existence  of  a  correlation  between 
these  revealing  measures  upstream  of  process  control  and  the  level  of  failure  during  final  inspection. 

Inclusions  Inherent  to  powder  metallurgy  process  should  not  be  considered  as  an  isolated  or  a  very  special 
case.  Hard  alpha  segregations,  based  on  interstitial  0,  N,  C  in  titanium  alloys,  complex  oarbonitride 
segregations  (white  spots)  in  VIM  /  VAR  processed  nickel  alloys  raise  similar  questions  and  call  for 
similar  solutions.  Generally  part  stress  conditions  (temperature,  stresses)  are  simply  less  severe  and 
"tolerable"  defects  more  Important.  But  for  all  that  they  are  not  always  easily  inspectable  and 
controllable  at  the  required  levels. 

Reliability  and  operation  safety  :  non-punctual  defects 

Although  punctual  crack-like  defects  are  the  first  defects  to  cross  the  mind  when  dealing  with  Damage 
Tolerance,  others  also  deserve  attention.  These  defects  such  as  dimensional  deviations  or  metallurgical 
mlcrostruoture  variations  are  more  general  and  may  ruin  the  reliability  of  "Damage  Tolerance"  design  if 
not  taken  into  account. 

Dimensional  non-conformities  may  generate  aerodynamic  disturbances,  modify  boundary  conditions,  natural 
frequencies  and  dampings,  lessen  margins  with  respect  to  aeroelastic  flutter.  This  may  result  in  the 
emergence  of  a  vibration  component  superimposed  on  the  low  cycle  stress,  the  effect  of  vibration  stresses 
on  crack  propagation  being  particularly  Important.  A  vibration  component  reaching  only  15  t  of  the  low 
cycle  stress  will  roost  of  the  time  have  no  significant  effect  on  initiation  life.  However  the  fact  that 
such  a  vibration  component  appears  only  a  few  tens  of  seconds  per  flight  at  a  frequency  of  the  order  of 
one  hundred  Hertz  is  sufficient  to  divide  propagation  life  expressed  in  flight  numbers  or  flight  hours,  by 
a  factor  equal  to  or  greater  than  5.  No  factor  of  safety  applied  to  Inspection  Intervals  could  cover  such 
a  variability  ;  it  is  clear  that  process  control  has  to  make  sure  that,  if  this  type  of  phenomenon  has  not 
been  encountered  during  engine  development  and  certification,  it  will  not  be  encountered  on  production 
engines. 

The  case  of  metallurgical  microstructure  variations  is  slightly  different.  Here  again  strong  relations 
exist  between  microstructure  (grain  and  hardening  phase  size  and  morphology,  etc.)  and  crack  growth  rates, 
even  if  they  are  often  complex  and  depend  e.g  on  crack  size  and  stress  conditions  taken  into 
consideration.  However  an  additional  difficulty  arises  :  in  fact  in  most  cases  microstructure  variations 
also  considerably  affect  initiation  life,  and  such  an  effect  is  generally  of  the  opposite  sign  when 
compared  to  the  effect  on  propagation  life.  Microstructure  dispersion  is  then  all  the  more  detrimental  ; 
as  a  natter  of  fact  part  operation  safety  should  in  no  case  be  detrimental  to  the  economic  life  of  the 
part.  Part  operation  safety  is  based  on  propagation  calculations  which  will  be  verified  if  the  grain  size 
is  important  "enough".  However  an  "oversized*  grain  will  impair  the  economic  life.  So  the  introduction  of 
a  "Damage  Tolerance"  concept,  in  this  example,  implies  an  increased  need  to  master  grain  size  variations. 
So  far  we  have  been  dealing  with  "defects"  in  the  most  conventional  sense  of  the  word,  i.e  non-conformity 
with  the  specifications  defining  the  product.  Moreover  it  has  been  clearly  evidenced  that  the  structural 
integrity  of  parts  designed  according  to  a  Damage  Tolerance  concept  can  not  be  ensured  by  the  "defect" 
infection  only.  In  this  respect  process  control  la  certainly  an  essential  tool  to  add  to  inspections  and 
the  only  way  to  nke  sure  that  a  part  will  actually  have  no  "non-tolerable  defect".  However  process 
control  is  not  restricted  to  guarantee  the  part  capability  to  meet  specifications  ;  it  also  aims  at 
reducing  product  variability  within  the  tolerance  range  and  is  very  useful  for  Damage  Tolerant  parts  for 
reasons  which  in  a  way  generalize  the  case  of  microstructures  dealt  with  above. 
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Life  cycle  costa  control 

Oleperelon  of  part  oharaoterlstios  (either  metallurgical  or  dimensional  or  surface  characteristics,  etc.) 
Is,  along  with  the  variety  of  engine  operating  conditions,  at  the  very  origin  of  the  dispersion  of 
Initiation  and  propagation  life  which  could  be  noted  If  engines  were  operated  in  an  "utmost"  manner,  ^n  a 
conventional  "safe  life"  concept,  many  critical  rotating  parts  (discs,  shafts)  have  a  limited  life 
obtained  by  applying  a  safety  factor  to  the  predicted  life  (based  on  calculations  and  tests)  of  the 
minimum  characteristics  part.  So  relations  between  Process  Control  and  Life  Cycle  Costs  do  exist  but 
partially  and  sometimes  thoroughly  In  so  far  as  It  Is  difficult  during  a  program  life  to  express  a 
reduction  of  generated  oharaoterlstles  variability  In  terms  of  an  Increase  In  predicted  life  or  a 
reduction  of  the  safecy  factor.  Inversely  an  Insufficiently  controlled  part  whose  real  life  would  be 
Inferior  to  the  predicted  life  may  not  be  problematic  as  long  as  the  safety  factor  makes  up  for 
Insufficient  control,  and  lead  to  a  disastrous  situation  if  limited  life  Itself  is  no  longer  ensured. 

In  the  Damage  Tolerance  approach,  relations  between  Process  Control  and  Life  Cycle  Costs  become  more 
direct  and  more  continuous  as  well.  When  exploited  In  Its  Integrality  (Retirement  for  Cause),  this  concept 
may  be  extended  to  the  point  that  operation  without  any  other  limit  than  the  real  life  (at  maximum 
tolerable  damage  detection)  Is  allowed.  In  such  a  situation,  any  characteristics  dispersion  will  directly 
affect  the  actual  operation  time  of  the  parts  ;  excessive  dispersions  leading  to  an  unexpected  high  number 
of  "unscheduled"  removals  would  bring  about  extremely  serious  consequences  In  the  logistics  field. 

Either  the  risk  of  operation  unavailability  should  be  accepted  or  considerable  spares  floats  should  have 
to  be  constituted  as  a  coverage  :  the  profit  expected  from  the  Damage  Tolerance  /  Retirement  for  Cause 
concept  would  be  cancelled,  or  even  would  turn  into  Increased  life  cycle  costs. 

Therefore  Damage  Tolerance  design  requires,  from  an  exclusively  economic  viewpoint,  to  tend  to  reduce  as 
much  as  possible  (Initially  tolerable)  "small  defects  likely  to  turn  Into  big  ones".  As  a  result  since 
Inherent  non-propagation  thresholds  are  rather  low,  scratches  and  handling  damages,  blending  radius 
profile  deviations,  peenlng  rims,  etc.,  are  continuously  tracked  down.  Examples  of  fatigue  cracks 
initiated  on  such  "defects"  during  rig  tests  are  represented  at  Fig.  A  and  5.  It  is  certainly  difficult  to 
remove  them  completely  but  significant  progress  can  be  made  provided  the  need  for  It  has  been  recognized. 
Fig.  6  shows  how  It  Is  possible  to  progress  in  blending  radius  profile  control  applied  to  LP  turbine  disc 
slots  and  scallops.  A  first  important  Improvement  has  been  achieved  In  setting  up  Integrated  Inspection 
enabling  the  performer  himself  to  Inspect  the  quality  of  rounded  edges  and  therefore  to  react  almost  In 
real  time.  A  second  step  of  Improvement  seems  to  take  shape  with  the  automation  of  radlusing  operations 
which  provides  better  repeatability  potentialities  (Fig.  7).  Another  example  in  Fig.  8  shows  that  new 
packaging  designs  adapted  to  turbine  discs  have  led  to  a  noticeable  improvement  of  surface  condition,  thus 
significantly  reducing  the  number  of  necessary  reworks  following  impacts  and  handling  damages. 

Damage  Tolerance  contribution  to  Process  Control 

As  already  seen.  Process  Control  Is  highly  necessary  to  a  Damage  Tolerance  approach.  Naturally 
conventional  tools  to  access  to  this  type  of  control  apply  perfectly  : 

-  statistical  follow-up  of  products,  processes  and  resources 

-  preventive  maintenance,  resource  reliability  analysis 

-  quality  action  groups 

-  process  modellzatlon 

-  etc. 

However  the  Damage  Tolerance  concept  certainly  makes  It  possible  to  tackle  the  conventional  Issue  of  a 
"compromise"  between  design  requirements  (specifications)  and  process  capabilities  from  a  new  point  of 
view. 

As  an  example  let  us  trace  back  the  procedure  followed  for  a  single-crystal  (AM1  alloy)  HP  turbine  blade 
characterized  by  very  thin  walls,  a  sophisticated  inner  cooling  and  a  high  operating  teaverature  (1850  K 
TET).  Once  the  first  twenty  blade  sets  have  been  manufactured  and  the  first  hundred  hours  of  development 
tests  logged,  a  multi-function  working  group  (Design.  Office  -  Process  Engineering  and  Manufacturing 
Workshop  -  Quality)  carried  out  a  kind  of  "product  review"  according  to  the  following  methodology  : 

.  49  specifications  (analyzed,  of  any  kind  :  metallurgical,  etc.) 

.  3  criteria  :  -  Operating  criticality 

-  Manufacturing  process  capability 

-  Manufacturing  Inspection  reliability 
.  4  or  5  rating  levels  : 

-  For  operating  criticality  i 

5  -  Effect  on  airworthiness 

4  -  Effect  on  life  cycle  costs  and  performance 

3  -  Other  effects 

2  -  Margin  2  50  I 

1  -  Margin  i  100  I 

-  For  manufacturing  process  capability  and  Inspection  reliability  t 

5  -  Non-capable  process,  non-reliable  inspection  <  need  for  innovations. 

4  -  Capability  margins,  detection  probability  to  be  improved 

3  -  Variability  to  be  improved  for  cost  efrectiveness 
1  -  Proeess  under  control 

Suoh  ratings  were  performed  e.g  from  records  of  the  statlstloal  process  follow-up  t  rejaotion  rates, 
reworks,  histograms  and  flow  charts,  etc. 
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As  a  first  step  each  of  the  49  specifications  was  transferred  to  a  Process  Capability  /  Inspection 
Reliability  diagram  which  makes  it  possible  to  Identify  the  points  for  which  an  Immediate  action  has  to  be 
taken.  The  49  characteristics  were  then  placed  on  a  Functional  Criticality  /  Process  Capability  X  (») 
Inspection  Reliability  diagram  (Fig.  9).  On  completion  of  this  analysis,  the  working  group  made  55 
proposals  split  up  as  follows  : 

-  13  specification  reviews 

-  26  modifications  of  manufacturing  and  inspection  methods,  (7  of  which  were  major  ones  l.e 
Inducing  Investments) 

-  16  programs  of  rig  or  engine  tests  Intended  to  verify,  if  required,  the  "tolerable"  aspect  of 
certain  variations. 

Such  an  approach  Indeed  consists  in  ensuring  Defect  Tolerance  and  through  Its  comprehensive  character  it 
brings  together  and  corroborates  everyone's  effort,  with  the  customer's  satisfaction  as  the  common 
ultimate  target.  Of  course  such  an  approach  can  also  be  very  profitable  when  applied  at  the  very  beginning 
of  design  (initial  drawings),  even  if  it  has  to  be  reajusted  during  development,  as  the  experience 
acquired  frcm  production  and  tests  delivers  precisions  on  the  defects  specific  to  the  part  and  on  their 
particular  behavior  on  the  engine  considered. 

From  a  similar  viewpoint  Damage  Tolerance  concepts  can  also  provide  new  opportunities  to  widely  propagate 
within  the  company  links  between  the  quality  of  everyone's  work  and  the  product  behavior  in  operation.  As 
an  example  we  set  up  a  training  course  on  "fatigue  and  rupture  mechanics"  meant  for  the  largest  possible 
audience  of  engineers  and  technicians  coming  from  activity  sectors  as  various  as  possible  :  project  or 
program  department  teams,  laboratories,  process  engineering,  workshop  supervising  personnel,  product 
support  technical  departments,  etc. 

The  4-day  training  includes  an  extremely  rudimental  theoretical  course  on  stresses  In  turbine  engines, 
fatigue  and  rupture  mechanics  laws  as  well  as  a  statistical  overview  of  structural  failure  sources  for 
engines  in  operation.  Above  all  it  includes  several  "case  studies",  drawn  from  real  investigations 
performed  after  ruptures  during  operation.  Of  course  such  studies  have  been  simplified  or  complemented  for 
the  purpose.  In  analyzing  the  cases  the  participants  who  work  in  groups  are  led  to  : 

•  Identify  and  understand  the  initial  reasons  for  the  structural  failure 

•  verify  the  Influence  of  defects  on  initiation  and  propagation  life  by  means  of  very  rudimental 
calculations 

•  compare  such  calculations  with  data  resulting  from  fracture  tests  (strlations,  rest  lines,  etc.). 

•  propose  on  a  Damage  Tolerance  basis  procedures  to  maintain  in  service  materials  featuring  the  same 
potential  failure  causes  :  selection  of  inspection  techniques  and  inspection  periodicity,  etc. 

•  evaluate  the  logistic  consequences  of  such  procedures  at  the  customer. 

Even  though  the  participants  do  not  become  experts  in  Damage  Tolerance,  they  acquire  a  far  better  insight 
into  this  aspect  of  phenomena  and  mechanisms  occurring  upstream,  downstream  and  in  their  everyday  work. 
So  they  have  a  clearer  and  closer  understanding  of  the  effect  of  these  components  on  the  end  customer's 
satisfaction.  Since  it  is  more  motivated,  the  trained  personnel  has  the  possibility  to  be  deeper  and  more 
consistently  Involved  in  the  entire  industrial  process  of  design,  production  and  operation. 

Finally  Damage  Tolerance  applied  to  aircraft  engines  appears  both  as  a  further  "urging  necessity"  to 
progress  in  process  control  and  as  the  opportunity  to  open  up  new  ways  to  achieve  such  a  control. 


(*)  Other  combinations  of  these  two  criteria  are  possible 
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SUMMRY 


Inside  the  company  quality  system  as  outlined  by  NATO  AQAP-1,  a  major  role  is  given  to 
engineering  quality.  This  is  the  branch  which  is  responsible  to  give  assurance  that  a 
design  and  development  program  is  set,  codes  of  design  practice  are  established  and 
maintained,  drawings  and  specifications  include  all  practical  experience  gained  by  the 
company. 

The  Engineering  Quality  Manual  and  the  Design  Manual  are  the  reference  for  such 
activities.  The  Engineering  Quality  Manual  in  fact  sets  the  methodology  to  be  used  in  the 
project  development.  The  Design  Manual,  on  the  other  hand  documents  the  technical  data 
and  information  to  support  material  choice,  structural  analysis,  life  prediction. 

An  example  is  given  to  show  the  type  of  content  of  the  Design  Manual  within  the  subject  of 
damage  tolerance  criteria  of  rotating  critical  parts. 


1.  COMPANY  PROFILE 


FiatAvio  carries  out  aero-engine  business  with  a  tradition  dating  back  to  1908  and 
since  continued  without  interruptions. 

The  Company  headquarters  and  main  manufacturing  plant  are  located  in  Torino;  other 
plants  are  in  Brindisi  (southern  Italy)  and  in  Torino  vicinity. 

FiatAvio  has  full  capability  in  design,  development  testing,  manufacturing  and  product 
support  relative  to  major  sections  of  military  and  commercial  aero-engines. 

Full  responsibility  is  held  by  Fiat  also  for  complete  auxiliary  power  unit  and  for 
space  applications  such  as  the  APU  for  the  AMX  aircraft  and  the  oxygen  turbopump  of 
main  engine  of  Ariane  5. 

Specific  involvement  in  design  and  manufacturing  is  also  that  of  the  helicopter  main 
power  transmission  field. 

Finally  great  importance  is  given  to  the  production  under  design  responsibility  held 
outside  FiatAvio  such  as  those  for  major  sections  of  commercial  engines,  for  complete 
military  engines,  for  overhaul  of  Italian  Air  Force  engines  and  last  but  not  least  for 
industrial  gas  turbines. 


Z.  DESIGN  MANUAL  COWCEPT  IN  FIAT  AVIO 

The  summary  presented  hereabove  shows  how  FiatAvio,  like  most  free-world  aerospace 
companies,  is  significantly  involved  in  design  engineering;  this  has  become  more  and 
more  due  to  the  need  of  maintaining  products  in  line  with  a  fast  and  demanding 
progress. 

As  a  consequence  of  this  evolution,  also  in  our  company  the  basic  quality  concepts  and 
techniques  find  new  and  complex  applications. 

A  special  application  of  these  is  to  design  engineering  activity. 

FiatAvio  has  recently  ii^lemented  an  interesting  program  to  this  effect. 

Subject  of  this  paper  is  a  summary  of  the  concepts  developed  by  FiatAvio  to  control 
quality  in  engineering  activities,  and  the  description  of  a  specific  application  of 
this  concept  in  the  field  of  DAMAGE  TOLERANCE  criteria  for  rotating  fracture  critical 
parts  lifing. 


The  strategic  decision  to  address  our  activities  to  products  designed  by  FiatAvio  has 
had  a  heavy  impact  in  the  company. 
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For  license  production  FiatAvio  to  implements  the  quality  concept  mainly  as  conformance 
to  a  design  with  known  characteristics  and  performance.  This  is  assured  by  proper 
actions  both  at  prevention  level  in  all  technical  departments  and  at  verification 
levels  through  the  necessary  inspections. 

On  the  other  hand  where  we  hold  full  design  responsibility  same  concepts  have  to  be 
applied.  In  fact  we  cannot  afford  to  simply  check  the  final  product  for  conformance  to 
the  applicable  requirements.  The  long  time  span  and  the  very  high  costs  necessary  for 
the  development  of  new  products  from  preliminary  design  through  qualification  requires 
to  keep  under  proper  control  the  whole  company's  technical  process. 

Within  this  evolution,  Design  Engineering  is  the  hinge  of  the  company's  approach.  This 
is  the  function  through  which  the  product  is  conceived  and  therefore  it  has  to  be  open 
to  all  new  technical  acquisition  and  to  be  capable  of  capitalizing  the  company's 
experience  on  established  know-how. 

Design  Engineering  should  therefore  blend  more  and  more  with  the  other  company 
functions  through  a  mutual  exchange  of  experience  and  methods. 

The  basic  principle  of  the  Engineering  Quality  program  is  that  the  output  of  this 
function  can  be  compared  to  that  of  a  complex  system.  This  is  confirmed  by  the  fact 
that  its  quality  level  cannot  be  assessed  by  a  simple  analysis  of  the  final  output. 

Such  assessment  can  in  fact  only  be  performed  through  a  system  capable  to  ensure  all 
activities  upstream  of  the  final  product  (i.e.  drawing,  specification,  test,  etc.)  are 
under  complete  control. 

Rather  than  performing  verifications  on  the  final  outputs,  it  is  necessary  to  emphasize 
an  engineering  sensitivity  to  quality;  such  sensitivity  should  become  a  basic  element 
of  this  activity. 

Consolidating  this  sensitivity  is  the  main  objective  of  the  program  and  includes  all 
Design  Engineering  activities  through  the  definition  of  accepted  methods. 

It  starts  from  preliminary  design  with  the  objective  to  define  methods  and  procedures 
to  ensure  the  general  airworthiness  and  contract  requirements  are  identified, 
critically  examined  and  explicitly  assumed  from  the  initial  design  phase. 

Moving  to  the  subsequent  step  of  finalized  design,  procedures  and  hence  organization 
channels  must  be  identified  to  ensure  a  continuous  comparison  of  the  developed  product 
to  the  initial  design  concept:  this  guarantees  that  the  necessary  changes  introduced 
during  the  development  phase  are  in  line  with  the  initial  definition,  i.e.  with  the 
reference  specification. 

Final  design  is  in  itself  a  complex  process  and  should  use  precise  methods. 

The  design  engineer  should  in  fact  have  consolidated  design  criteria  as  guidelines  and 
use  only  qualified  theoretical  analysis  and  design  methods. 

This  in  fact  ensures  that,  without  limiting  individual  creativity,  the  methods  used 
have  been  checked  and  approved  for  effectiveness,  accuracy  and  cost.  Theoretical 
analysis  methods,  for  instance,  should  be  considered  special  processes  which  must  be 
qualified,  i.e.  their  boundary  conditions,  operation,  accuracy  and  output  must  be 
assessed  and  found  acceptable. 

Also  experimental  work  has  to  be  controlled  through  applicable  specifictions,  activity 
flow  path  and  performance  of  test  work. 

This  means  that  the  complex  design  engineering  activity  has  specific  guidelines  and 
instruments,  the  performance  of  which  is  the  responsibility  of  the  function  itself,  and 
a  development  activity  flow-path  rationally  consolidated. 

This  allows  to  plan  suitable  verification  steps  with  specific  acceptance  criteria  and 
to  schedule  and  control,  even  time-wise,  interlocked  and  highly  complex  activities. 

In  such  a  scenario,  Quality  cooperates  very  strictly  with  Design  Engineering,  and 
maintains  full  responsibility  for  quality  also  in  this  area.  This  is  achieved  through 
the  Engineering  Quality  function  which  is  part  of  Engineering  with  a  functional 
reporting  line  to  Quality. 


In  this  area  two  basic  instruments  have  been  identified: 

-  the  Engineering  Quality  Manual 

-  the  Design  Manual 

The  Engineering  Quality  Manual  is  devoted  to  the  definition  of  the  procedural  aspect  of 
engineering  operation.  Therefore  it  contains  the  description  of  the  activities  with 
their  relevant  flow  diagrams,  the  definition  of  interfaces,  the  detail  responsibili¬ 
ties,  the  engineering  quality  control  features  and  responsibilities. 

The  Design  Manual  on  the  other  hand  is  concentrated  on  the  content  of  design.  It  has 
the  aim  of  consolidating  and  updating  the  scientific  and  technical  knowledge  with 
special  regard  to  lessons  learned  from  experience. 

It  is  a  major  tool  to  support  technical  decisions  and  their  proper  delegation.  But  it 
has  also  a  specific  objective  of  helping  training  of  engineering  personnel.  Finally 
through  the  dedicated  check-lists  it  is  a  mean  of  engineering  quality  control  and  a 
directive  for  design  reviews. 

The  Design  Manual  is  structured  by  individual  monographies  covering  separately 
homogeneous  subjects. 

As  an  example,  we  have  summarized  the  content  of  chapter  "Lif ing-Damage  Tolerance" 
included  in  the  Turbine  Disks  monography  which  is  being  prepared  by  Engineering 
Department . 

The  content  is  by  nature  dynamic  and  is  continuously  improved  and  evolved.  The  example 
is  however  representative  of  the  type  of  content  our  design  manual  is  based  on. 


3.  EXAMPLE  OF  IMPLEMENT AT lOH 

3.1  TIWBIWE  DISKS  FAILURE  MOOES 

Turbine  disks  of  advanced  turbojet  and  turbofan  engines  are  high  speed  rotating 
components  whose  failure  would  yield  high  energy  fragments,  likely  uncontained  by  and 
inside  the  engine  tuibine  casing(s). 

Since  such  a  failure  would  constitute  a  hazard  to  the  aircraft  safety,  turbine  disks 
are  classified  as  fracture  critical  parts;  their  structural  integrity  must  be 
guaranteed  with  a  high  global  safety  level  against  all  the  possible  failure  modes. 

In  the  design  phase  the  following  failure  modes  are  considered: 

Permanent  set 
Burst i ng 

High  Cycle  fatigue 
Low  Cycle  Fat igue 

While  for  the  first  three  modes  design  criteria  are  well  assessed  and  basically  common 
to  all  aeroengine  mani factures,  lifing  criteria  related  to  low  cycle  fatigue  have 
evolved  from  the  conventional  safe  life  approach  after  the  introduction  of  high 
strength  alloys  like  those  based  on  powder  metallurgy. 

Life  prediction  reliability  depends  on  the  procedure  itself  as  well  as  on  the 
confidence  of  the  engine  operating  conditions  definition,  the  methods  of  stress  and 
temperature  analysis,  the  material  design  data. 

In  the  following  paragraphs  the  lifing  methodology  adopted  by  FiatAvio  will  be  treated, 
as  well  as  some  results  of  the  planned  activities  to  verify  the  criteria. 

This  methodology  is  considered  as  the  basis;  if  necessary  it  will  be  modified  to  meet 
the  requirements  of  specific  projects.  Emphasis  will  be  given  only  to  those  features 
which  make  advanced  materials  lifing  different  from  the  traditional  ones. 


3.2  LIFINfi  CONCEPTS  AND  PROCEDURES 


The  most  general  fatigue  lifing  approach  is  based  on  the  total  life  concept. 

With  reference  to  a  component  critical  area,  the  useful  cyclic  life  (N^)  is  given  by 
the  two  terms  corresponding  to  crack  initiation  and  to  crack  propagation  (Np): 

Nt  =  Ni  +  Np 

The  reliable  service  life  (S)  can  be  established  by  spinning  tests  (using  a  reference 
stress  cycle)  to  determine  the  experimental  cyclic  life  (N),  taking  into  account  the 
fatigue  life  scatter  factor  (y)  and  the  mission  exchange  rate  (fi); 


S  = 


where  S  is  in  operating  engine  hours. 


The  two  values  y  and  R  are  not  rig  test  ;  results,  but  they  are  previously  assessed  on 
the  basis  of  material  data  and  design  missions. 

The  theoretical  treatment  of  the  fatigue  phenomenon  as  well  as  the  experimental 
findings  suggest  to  refer  y  and  B  to  the  fatigue  life  stages  (initiation  and 
propagation ) : 


St  =  Ni/  +  Hpf 

yi.Bi  yp  -Bp 

When  only  the  first  terra  is  considered,  the  approach  is  "SAFE  LIFE"  type,  whereas  by 
considering  the  second  term  only,  the  lifing  method  is  "DAMAGE  TOLERANCE". 

According  to  the  remote  probability  level  required  for  turbine  disks  fracture,  yi  value 
is  about  10  for  conventional  nickel  alloys,  about  100  for  powder  metallurgy  alloys. 

The  very  large  scatter  factor  of  PM  alloys  is  shown  in  fig.l  with  reference  to  the 
Astroloy  LC  PM  al loy. 

It  is  evident  how  for  advanced  high  strength  alloys,  the  crack  initiation  life 
demonstration  is  not  an  efficient  way  to  assess  the  component  life. 

FiatAvio  has  adopted  the  method  to  demonstrate  turbine  disk  life  on  the  basis  of  crack 
propagation  only;  in  line  with  this,  preflawed  disks  are  spun  up  to  the  critical  crack 
size  in  order  to  demonstrate  the  propagation  cyclic  life. 

The  flaws  have  to  be  obtained  by  appropriate  methods  and  the  induced  crack  sizes  must 
be  of  the  order  of  the  remote  probability  defect  size  assessed  for  the  specific 
component  or  material. 

In  accordance  with  the  major  european  aeroengine  companies  approach,  the  initial  defect 
size  assumption  is  based  on  the  intrinsic  material  defect  distribution,  related  to 
characteristic  features  of  the  material  process  and  its  control. 

The  test  method  mentioned  above  is  applicable  only  to  surface  critical  areas;  if 
internal  areas  are  the  most  critical,  the  test  results  obtained  on  surface  preflawed 
disks  should  be  properly  factored. 

Corrective  factors  are  also  to  be  applied  to  take  into  account  any  difference  between 
the  artificial  crack  size  and  the  size  of  the  most  severe  intrinsic  one. 

In  conclusion,  cyclic  growth  life  Np  has  to  be  determined  by  preflawed  disks  spinning; 
the  corresponding  safe  cyclic  growth  life  is  obtained  dividing  by  the  scatter  factor 

yp- 

For  all  the  materials  of  interest,  the  crack  propagation  scatter  factor  is  yp  =  2.  It 
could  be  omitted  in  the  case  it  can  be  justified  by  the  initiation  life  analysis,  based 
on  S  vs.  N  fatigue  curves  obtained  using  specimens,  when  Si  i  Sp. 

The  above  indicated  allowance  about  yp  is  the  first  step  towards  the  total  life 
approach  which  has  to  be  used  only  when  sufficient  experience  has  been  accumulated  and 
test  data  both  on  specimens  and  disks  are  available. 


The  exchange  rate  evaluation  (Bp)  has  to  be  done  on  the  basis  of  engine  missions,  using 
an  ad-hoc  computer  code  developed  on  the  basis  of  fracture  mechanics  concepts  and 
experimentally  verified. 

3.3  MATERIAL  DESIGN  DATA 

Material  structural  properties  are  established  by  test  on  specimens  from  "as  produced" 
parts. 

Additional  data  required  by  the  damage  tolerant  approach  are  the  cyclic  crack  growth 
data  (da/dN  vs  K  curves),  fracture  toughness  (Kc)  and  the  defect  size  distribution. 
Fracture  mechanics  data  are  typical  (average)  values  since  in  the  damage  tolerant 
approach  the  required  high  safety  level  is  achieved  mainly  through  the  assumption  about 
the  most  severe  initial  flaw  size. 

The  defect  size  distribution  is  derived  by  the  scanning  electron  microscope 
fractography  on  low  cycle  fatigue  test  specimens  (an  example  is  shown  in  fig. 2). 

By  focusing  on  the  crack  initiation  site,  if  crack  nucleation  is  caused  by  embedded 
inclusions,  the  size  will  be  determined  relative  to  the  axes  of  the  ellipse  which 
circumscribes  the  actual  flaw  within  the  stress  plane.  Then  "penny  shaped"  crack  size 
(radius)  is  established,  equivalent  to  the  elliptical  one  in  terms  of  area;  their 
equivalence  in  terms  of  fracture  mechanics  is  demonstrated. 

For  surface  inclusions  and  corner  inclusions,  the  shapes  to  be  used  are  the 
semi-ellipse  and  the  quarter-ellipse,  with  the  equivalent  radius  of  the  semi  and 
quarter-circle  respectively  (see  fig. 3). 

All  equivalent  defect  sizes  constitute  a  set,  by  ranking  the  values  it  is  possible  to 
associate  to  each  set  element  a  cumulative  occurrence  probability  and  then  by  using  a 
proper  statistical  distribution  it  is  possible  to  extrapolate  from  the  esperimental 
defect  size  the  design  size  with  the  required  remote  probability  of  occurrence. 

Fig. 4  gives  an  example  of  the  defect  size  distribution  obtained  using  the  method  here 
illustrated;  the  same  approach  can  be  adopted  for  other  defects  (pores,  ppb's, 
inclusions  clusters,  etc.)  if  their  severity  is  such  as  to  generate  fatigue  crack 
initiation. 

3.4  PROCEDURE  TEST 

The  lifing  procedure  summarized  in  paragraph  3.2  has  to  be  tested  in  its  relevant 
assuptions  and  codes  before  it  can  be  used  for  production  engines. 

Three  elements  are  important: 

-  short  crack  behaviour 

-  stress  intensity  factor  evaluation 

-  exchange  rate 

It  is  well  known  that  fatigue  crack  propagation  data  obtained  by  conventional  ASTM 
specimens  are  not  applicable  for  short  crack  behaviour. 

In  order  to  avoid  possible  limits  in  the  crack  growth  data  application  it  has  been 
decided  to  characterize  the  material  by  testing  specimens  with  crack  size  similar  to 
the  most  severe  intrinsic  defects. 

The  specimen  adopted  is  the  corner  crack  one,  calibrated  in  the  TX114  programme,  which 

allows  crack  size  less  than  100  micron  and  which  guarantees  the  full  validity  of  the 

crack  growth  data  obtained. 

If  the  evolution  of  powder  metallurgy  alloys  will  allow  to  obtain  cleaner  materials 
with  smaller  defect  size  than  the  present  ones,  the  calibration  of  the  corner  crack 
specimen  would  have  to  be  extended  down  to  the  new  defect  size  level. 

The  stress  intensity  factor  evaluation  is  presently  based  on  nominal  stress 

distribution  obtained  by  MSC/NASTRAN  Finite  Element  code  and  on  the  parametric  shape 


factor  formula  derived  by  technical  literature. 

Even  if  F.E.  analysis  were  used  directly  to  derive  the  stress  intensity  factors,  for 
instance  by  the  special  elements  provided  by  advanced  F.E.  codes,  it  is  fundamental  to 
experimentally  verify  the  stress  intensity  factor. 

This  will  be  done  by  comparing  the  crack  growth  curves  obtained  respectively  for  a  well 
characterized  specimen  and  for  a  preflawed  disk,  when  both  are  fatigue  cycled  within 
the  same  stress  range,  provided  they  are  of  the  same  material  and  the  disk  surface 
conditions  do  not  significantly  affect  crack  growth. 

Last  but  not  least,  the  exchange  rate  evaluation  is  to  be  considered. 

The  damage  tolerance  approach  introduces  a  certain  number  of  aspects  which  should  be 
taken  into  account  in  order  to  analyze  complex  stress  spectra. 

Such  aspects  are  mainly  related  to  sequence  effects,  retardation,  crack  closure. 

Also  the  general  validity  of  the  related  algorithms  must  be  tested  because  of  the 
difference  between  6i  and  Bp  for  the  same  stress  spectrum. 

Fig. 5  shows  the  experimental  results  obtained  by  FiatAvio  in  a  specific  testing  program 
designed  to  validate  the  Bp  evaluation  code. 

Crack  growth  rates  were  measured  on  corner  crack  specimens  using  a  constant  amplitude 
load  and  a  complex  spectrum  related  to  an  actual  engine  usage. 

The  comparison  between  the  crack  growth  per  mission  and  the  crack  growth  per  reference 
cycle  is  very  much  in  line  with  the  previous  exchange  rate  evaluation  obtained  by  the 
FiatAvio  code. 

4.  CONCLUSION 


This  presentation  was  aimed  at  indicating  the  basic  concepts  of  FiatAvio  system  to 
control  design  engineering  activity. 

The  system  is  based  on  the  preparation  and  on  the  use  of  a  technical  instrument,  the 
Design  Manual,  and  on  an  organization  instrument,  the  Engineering  Quality  Manual. 

The  final  certification  should  confirm  that  the  design  has  been  performed  in  line  with 
both  Manuals  guidelines. 

Both  of  them  are  the  tools  to  control  step  by  step  the  complex  process  of  design  within 
the  development  plane. 

Final  assessment  of  the  design  is  therefore  reached  through  the  progressive 
accomplishment  of  controlled  steps,  thus  minimizing  the  technical  risks  concerned  with 
the  development  plane. 

Therefore  this  Design  System  contributes  to  Quality  concept  implementation  for  the 
benefit  of  both  the  Customer  and  the  Company  itself. 


Fig.  1  LCF  results  at  SOO’C  on  powder  Astroloy  LC  (line  represent  fatigue 
crack  growth  prediction) 


Fig.  2-a  Fatigue  crack  initiation  site  obtained  by  SEM  on  LCF  specimen 


Fig.  2-b  Analysis  of  the  crack  initiation  defect 
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g.  3  Equivalence  schewe  for  defects  with  different  location 


CRACK  GROWTH  RATE  PROBABILITX  OF  OCCURENCE  C/J 


Fig.  4  Statistical  distribution  of  the  most  severe  defects  size  obtained 
on  powder  ftstroloy 


Fig.  5  Experimental  growth  rates  obtained  by  cycling  with  a  constant  load 
range  and  a  complex  spectrum  vs  max  stress  Intensity  factor  at  4S0°C 
(data  obtained  by  Pisa  UnIversHy  on  behalf  FlatAvIo) 


Summary  of  the  discussion  (last  session  of 
Workshop  IV  on  Damage  Tolerance  for  Engine 
Constituents). 


The  Workshop  addressed  five  topics  : 

-  Introduction  -  Needs  and  Approaches  to  Reliabili¬ 

ty  and  Quality  Assurance 

-  Component/Materials  Specifications  and  Standards 

-  Control  of  Manufacturing  Processes  and  Procedures 

-  Quality  Assurance  and  Design  Systems 

-  Common  ACARD  Approaches  and  Actions. 

A  general  discussion  (reviewing  the  conclusions 

and  points  made  during  the  previous  Workshops) 

helped  in  identifying  subjects  for  future  AGARD 

cooperation,  namely  ; 

-Establishment  of  a  database  on  Defect  Distributions 
(including  handling  damage). 

-  Assessment  of  the  Effects  of  Defects,  taking  into 
account  environmental  conditions  and  short  crack 
behaviour. 

-  Review  of  statistical  methods  used  in  NDE. 

-  Action  trying  to  answer  the  question  ;  are  NDE 
techniques  quantitative  rather  than  qualitative, 

-  Investigation  of  models  describing  the  basic 
behaviour  of  materials. 

-  Customer's  point  of  view  on  Retirement-for-Cause 
acceptance. 

-  Development  of  New  Materials  and  Procedures  - 
consequences  on  damage  tolerance  approaches. 

-  Tentative  review  of  a  closer  insight  of  Damage 
Tolerance  Basics. 
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Dr.-Ing.  W.  Schutz 

Indust rieanlagen-Betriebsgesellschaft  mbH 
Einsteinstr.  20 
D-8012  Ottobrunn 


1.  General 

This  fourth  and  last  workshop  of  the  Series 
again  showed  that  the  USAF-ENSIP-Damage  To¬ 
lerance  Approach  is  viewed  with  somewhat 
less  enthusiasm  by  European  gasturbine  ma¬ 
nufacturers  than  by  the  USAF  and  US  manu¬ 
facturers:  While  both  sides  stress  that  the 
effect  of  defects  on  durability  of  engine 
components  is  extremely  important,  the  ways 
of  dealing  with  defects  are  different: 

The  USAF  and  its  suppliers  in  the  Engine 
Structural  integrity  Program  assume 
cracklike  defects  to  be  present  from 
manufacture  onwards.  NDI  must  detect  the 
size  of  defects  with  an  agreed  degree  of 
confidence.  This  approach  is  now  manda¬ 
tory  for  future  USAF  gas  turbines. 

However,  NDI  is  additionally  used  for 
process  control,  and  in  certain  engines, 
for  RFC  (Retirement  For  Cause), 

The  European  manufacturers  in  the  first 
place  try  to  avoid  such  defects  by  manu¬ 
facturing  process  control.  In  the  U.K., 
for  example,  NOI  is  used  in  a  process 
monitoring  role  to  prove  during  develop¬ 
ment  that  the  manufacturing  process  is 
viable,  and,  during  production,  to  moni¬ 
tor  that  it  stays  within  acceptable 
limits . 

The  USAF  contribution  (Cowie,  see  below) 
impressed  the  recorder  -  like  many  previous 
USAF  papers  on  ASIP  or  ENSIP  - 

by  the  huge  amount  of  data  available  on 
every  important  parameter,  like  NDI  - 
capabilities,  crack  propagation  proper¬ 
ties  of  relevant  materials,  etc., 

by  the  continual  improvement  of  NOI-ca- 
pabillties  and  material  properties  over 
the  last  10  years  and 

by  the  logical  and  consistent  way  of 
identifying,  attacking  and  solving  the 
many  problems  inherent  in  this  appro¬ 
ach. 

One  reason  for  the  (in  the  recorders'  opi¬ 
nion)  superiority  of  the  USAF  approach 
probably  is  the  much  stronger  position  of 
the  USAF  as  a  buyer  in  a  huge  market,  be¬ 
cause  of  the  larger  number  of  aircraft  (and 
engines)  of  one  type.  The  high  additional 
first  cost  of  proving  the  viability  of 
BN8IP  is  thus  justified  by  the  much  smaller 
life  cycle  costs  of  the  many  engines  invol¬ 
ved. 


In  contrast,  the  European  Airforces  buy 
smaller  numbers  of  aircraft  of  one  type, 
have  a  weaker  position  versus  their  manu¬ 
facturers  and  cannot  spend  so  much  money  on 
a  (to  them)  new  method  of  ensuring  structu¬ 
ral  integrity  of  engines. 

2.  The  papers 

2.1  Introduction  -  Needs  and  Approaches  to 
Reliability  and  Quality  Assurance  in 
Design  and  Manufacture  -  Pickard,  Rolls 
Royce,  U.K. 

Pickard  gave  an  overview  over  the  previous 
three  workshops  and  again  stressed  the  need 
for  common  Agard  Approaches  and  Actions, 
for  example: 

the  establishment  of  a  database  on 
defect  distributions  (including  hand¬ 
ling  damage), 

the  assessment  of  the  effect  of  de¬ 
fects,  accounting  for  environmental 
conditions  and  short  crack  behaviour, 
a  review  of  statistical  methods  employ¬ 
ed  in  NDI  etc. 

Although  no  firm  decisions  were  taken  at 
the  Workshop  itself,  in  the  meantime  seve¬ 
ral  Agard  SHP  activities  in  the  above 
fields  were  discussed  or  are  at  the  start¬ 
ing  point. 

In  the  discussion  period  of  this  paper,  the 
imperative  need  to  agree  on  design  spectra 
was  stressed.  Without  correct  design  sprec- 
tra,  no  approach  will  work,  as  shown  by  the 
severe  structural  problems  of  several  mo¬ 
dern  tactical  aircraft,  where  the  design 
spectrum  was  not  as  severe  as  actual  usage. 

2.2  USAF  Engine  Structural  Integrity 
Program  (ENSIP)  Status  -  Cowie,  USAF 

Cowie  first  reported  on  the  evolution  of 
ENSIP  and  about  some  lessons  learned,  among 
them  again  the  importance  of  correct  spec¬ 
tra  for  design,  component  tests  and  full 
scale  engine  tests. 

The  quoted  weight  increase  of  20  lbs  for 
all  rotating  parts  of  an  engine  due  to  the 
DT  requlranents  was  questioned  in  the  dis¬ 
cussion  period.  The  answer  was  that  this 
was  an  actual  weight  Increase,  although  the 
DT  requirements  would  slse  the  part,  not 
the  LCr  (durability)  requirements. 

The  continual  development  of  NDI  capabili¬ 
ties  mentioned  above  was  shown  in  a  few 
examples:  For  six  different  materials  the 
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detectable  flaw  size  (with  the  usual  90/95 
requirement)  decreased  from  about  1  mm  to 
0,25  mm  from  1985  to  1990. 

In  the  materials  field,  the  trend  of  using 
materials  with  higher  yield  strengths  and 
consequently  worse  crack  propagation  pro¬ 
perties  was  reversed  (at  least  in  one 
case):  A  five  percent  lower  yield  strength 
was  allowed  and  the  burst  speed  require¬ 
ment  of  120  %  was  relaxed  to  117  %  to  ob¬ 
tain  better  crack  propagation  lives,  namely 
from  4000  to  nearly  10000  cycles.  In  this 
case  of  the  F-lOO  engine,  for  a  1  %  weight 
increase,  savings  of  more  than  $  300000  per 
engine  due  to  reduced  maintenance,  incre¬ 
ased  parts  life  etc.  were  realized. 

Accelerated  mission  testing  and  how  to  ac¬ 
celerate  it  compared  to  service  without 
overloading  the  component  was  mentioned  in 
the  discussion  period.  The  answer  was  "by 
omission  of  nondamaging  events". 


2.3  Manufacturing  Process  Control  as  a 
Damage  Tolerance  Concept  -  Herteman, 
SNECWA,  France 

Herteman  distinguished  between  flaws  during 
manufacture,  which  MFC  can  exclude  and 
cracklike  flaws,  which  develop  during  ser¬ 
vice  . 

The  difficulty  of  not  only  detecting  a  flaw 
but  also  determining  its  actual  size  was 
shown,  where  in  the  worst  case  the  actual 
flaw  sizes  were  three  times  larger  than  the 
indicated  ones. 

"Dimensional  nonconformi ties"  also  can  be 
avoided  by  MFC.  If  they  occur,  they  may 
cause  additional  low  vibrational  stresses 
of  a  high  frequency,  which  may  result  in  a 
reduction  of  the  crack  propagation  life  by 
a  factor  of  up  to  five. 

All  this  goes  to  show  that  MFC  is  absolute¬ 
ly  necessary,  whatever  approach  is  used  for 
lifing  the  engine.  This  was  agreed  in  the 
final  discussion  period  by  speakers  from 
the  US  and  Europe. 

The  extreme  significance  of  motivation  of 
all  personal  involved  in  the  production  of 
gasturbines,  from  the  project  team  through 
NDI ,  process  engineering,  shop  floor  mecha¬ 
nics  to  supervisors,  was  stressed.  Motiva¬ 
tion  can  be  promoted  by,  for  example,  trai¬ 
ning  courses  on  the  technical  problems  in¬ 
volved  and  by  impressing  on  everybody  the 
importance  of  the  work  he  or  she  is  doing. 

2.4  Quality  Assurance  and  Design  Systems  - 
L.  Caroni  and  E.  Campo,  FiatAvio,  Italy 

FiatAvio  demonstrates  turbine  disc  life  on 
the  basis  of  crack  propagation.  Therefore 
preflawed  discs  are  cyclically  spin  pit 
tested  to  failure.  The  initial  flaw  size  to 
be  introduced  in  the  disc  is  determined  by 
SBM  inspection  of  the  material  in  question 
and  is  of  the  order  of  a  remote  probabili¬ 
ty.  One  reason  for  the  adoption  of  this 


lifing  approach  is  the  extremely  large 
scatter  of  crack  initiation  life  of  turbine 
disc  materials,  expeclally  FN  alloys,  which 
would  result  in  very  low  allowable  stresses 
if  the  "safe  life"  approach  were  used. 

2.5  Common  Agar d  Approaches  and  Actions  - 
Labourdette,  Onera,  France 

This  was  more  or  less  a  discussion  period 
on  several  subjects,  for  example: 

The  usefullness  of  an  Agard-Database  on 
defect  distribution  was  doubted  by 
several  discussions.  Conclusion:  Data 
bases  are  a  long  way  down  the  line. 

Frocess  Control  Validation  was  missing 
as  a  topic  in  the  four  workshops.  Con¬ 
clusion:  Agreed. 

Have  the  USAF  gone  back  from  RFC,  do 
they  have  MFC  at  all? 

Answer:  No  to  the  first  question,  it  is 
used  in  certain  engines;  yes  to  the 
second  question,  but  the  US  do  not 
place  so  much  emphasis  on  MFC  as  some 
European  manufacturers. 

-  Effect  of  defects,  i.e.  does  a  defect 
behave  like  a  crack? 

Conclusion:  That  would  be  a  good  topic 
for  the  Agard  SMF. 

Does  automated  NDI,  as  used  in  the  USA 
have  a  high  reject  rate? 

Answer:  In  one  case,  260  parts  of  8000 
were  rejected,  an  acceptable  rate. 
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14.  Abstract 

'^The  Structures  and  Materials  Panel  has  organized  a  series  of  four  Workshops  planned  within  the 
framework  of  a  Review  on  Damage  Tolerance  for  Engine  Structures.  The  Review  aimed  to 
address  the  areas  critical  to  the  acceptance  of  an  approach  based  on  damage  tolerance  concepts  as 
an  alternative  lifeing  philosophy  to  that  of  “safe  life”  for  the  design  of  engine  components. 

This  publication  is  the  last  in  the  series  on  the  Workshops.  Previous  topics  covered  by  the  Review 
include;  “Non-Destructive  Evaluation  of  Components”,  “Defects  and  Quantitative  Materials 
Behaviour"  and  “Component  Behaviour  and  Life  Management”,  published  as  R-768,  R-769  and 
R-770,  respectively.  This  workshop  addressed  the  need  for,  and  the  approaches  to,  ensuring 
component  reliabiUty  and  quality  assurance.  It  surveyed  the  current  procedures  for  materials  and 
component  specifications,  standard  process  control,  quality  assurance  and  design  systems.  The 
prospects  for  devising  a  common  NATO  data  base  on  integrity-related  problems  were  examined. 
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